CVE-2024-7965: Google Chromium V8 Inappropriate Implementation Vulnerability

Required action (CISA's text)

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description (NVD)

Google Chromium V8 contains an inappropriate implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

SOURCES

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Other Google flaws

• CVE-2026-125350: Google Chromium Use-After-Free Vulnerability
• CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability
• CVE-2026-58704: Google Pixel Improper Authorization Vulnerability
• CVE-2026-87491: Google Chromium V8 Out of Bounds Write Vulnerability
• CVE-2026-85046: Google Chromium V8 Type Confusion Vulnerability

Data from NVD, CISA KEV, FIRST EPSS and vendor advisories. Updated 10 Nov 2026.