CVE-2024-5274
CVSS Score
8.3
EPSS Score
0.0%
EPSS Percentile
0th
Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
| Vendor | |
| Product | chrome |
| Ecosystems | |
| Industries | Technology |
| Published | May 28, 2024 |
| Last Updated | Oct 21, 2025 |
⚠️ Actively Exploited — Act Now
Get instant alerts for google chrome
This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2024-5274.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Google / Chrome
125.0.6422.112 < 125.0.6422.112
References
chromereleases.googleblog.com: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html issues.chromium.org: https://issues.chromium.org/issues/341663589 lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/[email protected]/message/T6IBUYVPD4MIFQNNYBGAPI5MOECWXXOB/ lists.fedoraproject.org: https://lists.fedoraproject.org/archives/list/[email protected]/message/AVC3FNI7HZLVSRIFBVUSBHI233DZYBKP/ cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-5274