CVE-2024-7965: Google Chrome V8 inappropriate implementation allows heap corruption

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 17 September 2026. Confidence: high.

high priorityConfirmed in-the-wild exploitation (CISA KEV) and a high CVSS score of 8.8 with network reachability make this a high-priority patch despite requiring user interaction.

What it is

Google Chrome before 128.0.6613.84 contains an inappropriate implementation in the V8 JavaScript engine that can lead to heap corruption. The flaw is remotely reachable through a crafted HTML page and is listed in CISA's Known Exploited Vulnerabilities catalog, so it warrants prompt remediation.

Impact

An attacker who gets a victim to load a crafted page can corrupt the heap, which can lead to code execution or a browser crash in the context of the user.

Attack surface

Reached over the network by rendering a crafted HTML page in Chrome or Chromium-based Edge; no authentication is required but user interaction (visiting the page) is needed per the CVSS vector.

Exploitation

CVE-2024-7965 was added to CISA KEV on 2024-08-28 with a 2024-09-18 due date, indicating known exploitation in the wild; EPSS gives a 30-day probability of 0.185 (97th percentile). No ransomware campaign use is documented.

What to do

• Update Google Chrome to 128.0.6613.84 or later and Microsoft Edge to its corresponding patched Chromium build.
• Apply mitigations per vendor instructions or discontinue use of the affected product if patching is not possible, per the CISA KEV required action.
• Prioritize patching internet-facing and high-value endpoints first, given confirmed exploitation.
• Verify browser version compliance across managed fleets and block or restrict use of unpatched Chromium-based browsers.

Detection

• Monitor for Chrome or Chromium-based browser crashes consistent with heap corruption, especially following visits to untrusted sites.
• Hunt for exploit delivery via crafted HTML pages, malicious ads, or compromised sites in web proxy and DNS logs.
• Track browser version inventory to identify endpoints still running Chrome below 128.0.6613.84.
• Review endpoint telemetry for suspicious child processes or code execution originating from browser processes.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.