CVE-2024-0519
Published 2024-01-16 · Updated 2026-06-17 · Source chrome-cve-admin@google.com
Summary
CVE-2024-0519 is a high-severity (CVSS 8.8) vulnerability in Google Chromium V8. CISA added it to the Known Exploited Vulnerabilities catalog on January 17, 2024, which means exploitation in the wild has been confirmed; US federal agencies had to remediate it by February 7, 2024. CISA does not currently list it as used in ransomware campaigns. Google has 76 vulnerabilities in the KEV catalog, 0 of them linked to ransomware.
All 76 known-exploited Google vulnerabilities →Description
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Google — Chromium V8
Name: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability
Date added: 2024-01-17 · Due: 2024-02-07
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
References
- https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html
- https://crbug.com/1517354
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IIUBRVICICWREJQUVT67RS7E4PVZQ5RS/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TNN4SO5UI3U3Q6ASTVT6WMZ4723FYDLH/
- https://www.couchbase.com/alerts/
- https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html
- https://crbug.com/1517354
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IIUBRVICICWREJQUVT67RS7E4PVZQ5RS/