{"id":"CVE-2024-9121","title":"Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page","summary":"Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-787"],"vendor":"google","product":"chrome","affected":["chrome < 129.0.6668.70"],"patched":["chrome 129.0.6668.70"],"published":"2024-09-25","updated":"2026-11-03","sourceUpdated":"2026-11-03T22:17:30.100","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-9121","references":[{"url":"https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop_24.html","label":"chrome-cve-admin@google.com"},{"url":"https://issues.chromium.org/issues/363538434","label":"chrome-cve-admin@google.com"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-09-26T03:55:48.551074Z"},"epss":0.0051,"epssPercentile":0.43674,"ingestedAt":"2026-11-05T06:38:03.578Z","slug":"CVE-2024-9121","body":"## Overview\n\nInappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)\n\n## Affected\n\n- `chrome < 129.0.6668.70`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `chrome 129.0.6668.70`","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}