CVE-2024-4947

Timeline

Detection, updates, and resolution for this record.

1. May 15, 2024 · Catalog

   Detected

   Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

2. May 20, 2024 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Jun 10, 2024 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Jun 17, 2026 · Catalog

   Updated

   Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected

• cpe fedoraproject/fedora38
• cpe fedoraproject/fedora39
• cpe fedoraproject/fedora40
• cpe google/chromeversion unspecified
• vendor Google Chromium V8version unspecified

Sources

• CISA KEVCVE-2024-4947

  Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.

  cisa.gov
• CVE.orgCVE-2024-4947

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2024-4947

  30-day exploitation probability 15.2%

  first.org
• NIST NVDCVE-2024-4947

  Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

  nvd.nist.gov

References

• CISA note · chromereleases.googleblog.com
• Exploit · issues.chromium.org
• Mailing List · lists.fedoraproject.org
• Mailing List · lists.fedoraproject.org
• Mailing List · lists.fedoraproject.org
• CISA note · nvd.nist.gov