Lucene search

MicrosoftMS:CVE-2024-7971

HistoryAug 22, 2024 - 7:00 a.m.

Chromium: CVE-2024-7971 Type confusion in V8

2024-08-2207:00:00

Microsoft

msrc.microsoft.com

chromium

type confusion

cve-2024-7971

google

microsoft edge

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

53.0%

JSON

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Google is aware that an exploit for CVE-2024-7971 exists in the wild.

Affected configurations

Vulners

Node

microsoftedge_chromiumRange<128.0.2739.42

VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	edge_chromium	*	cpe:2.3:a:microsoft:edge_chromium::::::::

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

53.0%

JSON

Related for MS:CVE-2024-7971