Vulnerability intelligence

CVE-2021-38003

Google Chromium V8 Memory Corruption Vulnerability

Google Chromium V8

Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS Score

8.8

High

EPSS — Exploit Probability

39%

Riskier than 98% of all CVEs · checked 2026-09-11

Exploitation

Confirmed in the wild

KEV since 2021-11-03

Remediation

Patch available

Federal deadline 2021-11-17

CISA required action

Apply updates per vendor instructions. Deadline for federal agencies: 2021-11-17.

NVD entry Vendor patch PoC / advisory CISA KEV

1 article across 1 outlet · first covered Sep 11, 2026 · latest Sep 11, 2026

Associated threat actors

UNC3569

Coverage timeline

China-Linked Hackers Exploit Sogou Flaw to Deploy GRAYRABBIT Backdoor
thehackernews.com · Sep 11, 2026

Related CVEs — Google

CVE-2026-87491KEV CVE-2026-28662 CVE-2026-85046KEV CVE-2026-49881 CVE-2026-5281KEV CVE-2026-11645KEV CVE-2026-2441KEV CVE-2026-3909KEV