CVE-2024-0519

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787 CWE-125

Affected software

No affected versions have been published.

Timeline

Published: Jan 16, 2024
Last modified: Jun 17, 2026
Added to CISA KEV: Jan 17, 2024
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-05208.8A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in a CVE-2024-05217.8Code Injection in paddlepaddle/paddle CVE-2024-05228.8A vulnerability was found in Allegro RomPager 4.01. It has been classified as problematic. Affected is an unknown function of the file usert CVE-2024-05239.8A vulnerability was found in CmsEasy up to 7.7.7. It has been declared as critical. Affected by this vulnerability is the function getslide_CVE-2024-05249.8A vulnerability was found in CXBSoft Url-shorting up to 1.3.1. It has been rated as critical. Affected by this issue is some unknown functio CVE-2024-05259.8A vulnerability classified as critical has been found in CXBSoft Url-shorting up to 1.3.1. This affects an unknown part of the file /pages/l CVE-2024-05269.8A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown code of the file /p CVE-2024-05279.8A vulnerability, which was classified as critical, has been found in CXBSoft Url-shorting up to 1.3.1. This issue affects some unknown proce CVE-2024-05289.8A vulnerability, which was classified as critical, was found in CXBSoft Post-Office 1.0. Affected is an unknown function of the file /admin/CVE-2024-05299.8A vulnerability has been found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this vulnerability is an unknown fun CVE-2024-05309.8A vulnerability was found in CXBSoft Post-Office up to 1.0 and classified as critical. Affected by this issue is some unknown functionality CVE-2024-05317.2A vulnerability was found in Tenda A15 15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/set