CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Chrome, Java. It is listed in CISA's Known Exploited Vulnerabilities catalog, indicating confirmed active exploitation in the wild. Its EPSS score suggests a 34.3% probability of exploitation in the next 30 days. It may be remotely exploitable.
CISA KEV Details
Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.
Ransomware use: Unknown
Added to KEV: 2022-06-08
Required action: Apply updates per vendor instructions.
Original NVD Description
Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Related CVEs
Other vulnerabilities affecting the same vendor(s)