What it is
Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
What to do
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
- chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html
- nvd.nist.gov/vuln/detail/CVE-2024-7971
Description and required action as published by CISA. Full record at NVD.
Other Google entries on the list
- Chromium Google Chromium Use-After-Free Vulnerability CVE-2026-125350 · Nov 10, 2026
- Brotli Google Brotli Unchecked Return Value Vulnerability CVE-2026-111497 · Oct 27, 2026
- Pixel Google Pixel Improper Authorization Vulnerability CVE-2026-58704 · Sep 16, 2026
- Chromium V8 Google Chromium V8 Out of Bounds Write Vulnerability CVE-2026-87491 · Sep 9, 2026
- Chromium V8 Google Chromium V8 Type Confusion Vulnerability CVE-2026-85046 · Sep 4, 2026
- Chromium V8 Google Chromium V8 Out-of-Bounds Read and Write Vulnerability CVE-2026-11645 · Jun 9, 2026