← Vulnerability Intelligence

CVE-2024-0519

High 8.8 Exploited in the wild (KEV)

Confirmed active exploitation — CISA KEV catalog

Name
Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Added to catalog
Remediation due date (US federal)
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Description

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1
8.8 (HIGH) Score source: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS — exploit probability
4% (percentile: 90) as of 2 November 2026
CWE
CWE-787, CWE-125

Affected products

google: chrome; fedoraproject: fedora; couchbase: couchbase server

References