Search for vulnerabilities
Vulnerability details: VCID-cjer-98d5-3qfb
Vulnerability ID VCID-cjer-98d5-3qfb
Aliases CVE-2024-4947
Summary Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Status Published
Exploitability 2.0
Weighted Severity 8.6
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (2)
CWE-416 Use After Free
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')
System Score Found at
cvssv3 8.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-4947.json
epss 0.00149 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00155 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00181 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00186 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00186 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00186 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00186 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.00467 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.01121 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.01121 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
epss 0.01121 https://api.first.org/data/v1/epss?cve=CVE-2024-4947
cvssv3.1 9.6 https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html
ssvc Attend https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html
cvssv3.1 9.6 https://issues.chromium.org/issues/340221135
ssvc Attend https://issues.chromium.org/issues/340221135
cvssv3.1 9.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
ssvc Attend https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
cvssv3.1 9.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/
ssvc Attend https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/
cvssv3.1 9.6 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/
ssvc Attend https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/
cvssv3.1 9.6 https://nvd.nist.gov/vuln/detail/CVE-2024-4947
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-4947.json
https://api.first.org/data/v1/epss?cve=CVE-2024-4947
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4947
2281874 https://bugzilla.redhat.com/show_bug.cgi?id=2281874
340221135 https://issues.chromium.org/issues/340221135
6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
CVE-2024-4947 https://nvd.nist.gov/vuln/detail/CVE-2024-4947
NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/
stable-channel-update-for-desktop_15.html https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html
WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/
Data source KEV
Date added May 20, 2024
Description Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page.
Required action Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due date June 10, 2024
Note 
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html; https://nvd.nist.gov/vuln/detail/CVE-2024-4947
Ransomware campaign use Unknown
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-4947.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2024-05-23T20:01:07Z/ Found at https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://issues.chromium.org/issues/340221135
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2024-05-23T20:01:07Z/ Found at https://issues.chromium.org/issues/340221135
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2024-05-23T20:01:07Z/ Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2024-05-23T20:01:07Z/ Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2024-05-23T20:01:07Z/ Found at https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-4947
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.36053
EPSS Score 0.00149
Published At Sept. 13, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T09:04:16.956470+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2024/4xxx/CVE-2024-4947.json 37.0.0