In CISA KEV8.8 High
CVE-2021-38003
Google Chromium V8 Memory Corruption Vulnerability
GoogleChromium V8
Status
- Exploited in the wild
- In CISA KEV since 3 Nov 2021
- Vendor fix available
- Associated threat actor: UNC3569
Federal deadlineWed 17 Nov 2021, 23:59 UTC
Passed 1803 days ago
CISA KEV · added 3 Nov 2021
Exploit probabilityEPSSchecked 26 Oct
39%probability of exploitation in the next 30 days
Higher than 98% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CISA required action
Apply updates per vendor instructions.
Coverage 1 article · 1 outlet
- China-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT BackdoorThe Hacker News · first in our coverage