Exploit / PoCcriticalExploited in the wild

U.S. CISA adds Google Chromium V8 bug to its Known Exploited Vulnerabilities catalog

Security Affairsby @securityaffairsAug 28, 2024 · 21:01 UTC (Aug 28, 2024)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2024-38856 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-38856 CVE-2024-7965 CVE-2024-7971

Tags: cve-2024-38856 cve-2024-7965 cve-2024-7971 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-38856	Pre-auth RCE via Incorrect Authorization in Apache OFBiz	9.8	99%	KEV	Aug 5, 2024 KEV Aug 27, 2024
CVE-2024-7971 +1 related CVE CVE-2024-7965	Type Confusion in Google Chromium V8 Enables Heap Corruption via Malicious Pages	9.6 group max	21%	KEVPoC	Aug 21, 2024 KEV Aug 26, 2024

From the original article

1 min read at securityaffairs.com

U. S. Cybersecurity and Infrastructure Security Agency (CISA) adds Google Chromium V8 bug to its Known Exploited Vulnerabilities catalog.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.