Search for vulnerabilities
Vulnerability details: VCID-tphj-4331-bfgn
Vulnerability ID VCID-tphj-4331-bfgn
Aliases CVE-2024-9603
Summary Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Status Published
Exploitability 0.5
Weighted Severity 7.9
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (1)
System Score Found at
epss 0.00134 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00134 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00134 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00134 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00134 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.00142 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
epss 0.0017 https://api.first.org/data/v1/epss?cve=CVE-2024-9603
cvssv3.1 8.8 https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_8.html
ssvc Track https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_8.html
cvssv3.1 8.8 https://issues.chromium.org/issues/367818758
ssvc Track https://issues.chromium.org/issues/367818758
cvssv3.1 8.8 https://nvd.nist.gov/vuln/detail/CVE-2024-9603
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_8.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none


Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-09T16:03:30Z/ Found at https://chromereleases.googleblog.com/2024/10/stable-channel-update-for-desktop_8.html
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://issues.chromium.org/issues/367818758
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none


Vector: SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-09T16:03:30Z/ Found at https://issues.chromium.org/issues/367818758
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-9603
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)
Percentile 0.33923
EPSS Score 0.00134
Published At July 30, 2025, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2025-07-31T08:52:58.550109+00:00 Alpine Linux Importer Import https://secdb.alpinelinux.org/v3.22/community.json 37.0.0