coldbraid

CVE-2021-38003 Google Chromium V8

Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CVSS
not scored

CWE-122CWE-755

On CISA’s exploited list

Google Chromium V8 Memory Corruption Vulnerability

Added
2021-11-03
Federal patch deadline
2021-11-17
Ransomware use
not known