CVE-2024-7024: Google Chrome

Critical severity, CVSS 9.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

Affected products

• Google Chrome: before 126.0.6478.54 (fixed in 126.0.6478.54)

Published 2024-09-23. Last modified 2026-06-17.