CVE-2024-4947

Google Chromium V8 allows remote code execution via a type confusion vulnerability in a crafted HTML page.

This type confusion vulnerability in Google's Chromium V8 enables remote attackers to execute arbitrary code through a malicious HTML page, posing a severe risk to DIB organizations relying on Chrome-based systems. The vulnerability is actively exploited and linked to ransomware campaigns, requiring immediate patching and network segmentation to prevent unauthorized access to sensitive data.

Shame score — Google's failure to proactively mitigate a known, actively exploited RCE vulnerability in a widely deployed product demonstrates negligence in maintaining security posture.