Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Risk score

100.0

Known exploited

CISA KEV

Published

2024-01-16

Status

Published

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Weaknesses

Out of bounds memory accessCWE-125CWE-787

Coverage 1

vulnerability

Google patches new Chrome zero-day flaw exploited in the wild

Google has released a security update to address a newly discovered and actively exploited zero-day vulnerability (CVE-2026-11645) within the Chrome browser. This flaw, originating in the V8 JavaScript engine, allows att…

BleepingComputer · Jun 9, 2026 High

CVE-2026-11645CVE-2024-0519CVE-2026-2441zero-daychromev8

All articles mentioning it

Advisories and references

• chromereleases.googleblog.com/2024/01/stable-channel-update-for-desk...
• crbug.com/1517354
• lists.fedoraproject.org/archives/list/[email protected]...
• lists.fedoraproject.org/archives/list/[email protected]...
• couchbase.com/alerts/
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-...