Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2024-2886

Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

CVSS 7.5 · HighBuzz score 34.4

Buzz score

Why this CVE is surfacing

Buzz score total 34.4

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 26.4 · diversity 8.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Mention score
26.4
13 evidence mentions in the snapshot
Diversity score
8.0
3 sources across 1 categories
KEV score
0.0
No KEV entry observed
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
13 source links · newest first
  • Google says a critical Chrome bug was exploited after a patch was releasedCSO Online

    Google is warning Chrome users of a critical vulnerability being actively exploited in the wild even after a patch was available. The vulnerability, tracked as CVE-2024-7965, is an inappropriate implementation security flaw in the V8 JavaScript and WebAssembly engine that received a CVSS rating of 8.8 out of 10. Google, in the advisory released with […]

    newswww.csoonline.comAug 27, 2024, 12:29 PM
  • Google addressed the tenth actively exploited Chrome zero-day this yearSecurity Affairs

    Google released emergency security updates to fix the tenth actively exploited Chrome zero-day vulnerability this year. Google released a security update to address a new Chrome zero-day vulnerability, tracked as CVE-2024-7965 (CVSS score 8.8), that is actively exploited. The vulnerability is an Inappropriate implementation issue that resides in Chrome’s V8 JavaScript engine. “Google is aware that exploits […]

    newssecurityaffairs.comAug 26, 2024, 10:57 PM
  • Google addressed the ninth actively exploited Chrome zero-day this yearSecurity Affairs

    Google released emergency security updates to fix the ninth actively exploited Chrome zero-day vulnerability this year. ​​Google released an emergency security update to address a Chrome zero-day vulnerability, tracked as CVE-2024-7971, that is actively exploited. The vulnerability is a type confusion issue that resides in Chrome’s V8 JavaScript engine. “Google is aware that an exploit for CVE-2024-7971 […]

    newssecurityaffairs.comAug 22, 2024, 8:10 AM
  • Google fixes eighth actively exploited Chrome zero-day this year, the third in a monthSecurity Affairs

    Google rolled out a new emergency security update to fix another actively exploited zero-day vulnerability in the Chrome browser. Google has released a new emergency security update to address a new vulnerability, tracked as CVE-2024-5274, in the Chrome browser, it is the eighth zero-day exploited in attacks disclosed this year. The vulnerability is a high-severity […]

    newssecurityaffairs.comMay 24, 2024, 1:13 PM
  • Google Patches Fourth Chrome Zero-Day in Two WeeksSecurityWeek

    Exploited in the wild, Chrome vulnerability CVE-2024-5274 is a high-severity flaw described as a type confusion in the V8 JavaScript and WebAssembly engine.

    newswww.securityweek.comMay 24, 2024, 8:39 AM
  • Google fixes seventh actively exploited Chrome zero-day this year, the third in a weekSecurity Affairs

    Google released security updates to address a new actively exploited Chrome zero-day vulnerability, the third in a week. Google has released a new emergency security update to address a new vulnerability, tracked as CVE-2024-4947, in the Chrome browser, it is the third zero-day exploited in attacks that was disclosed this week. The vulnerability CVE-2024-4947 is […]

    newssecurityaffairs.comMay 16, 2024, 1:11 PM
  • Third Chrome Zero-Day Patched by Google Within One WeekSecurityWeek

    Google releases Chrome 125 to the stable channel with patches for nine vulnerabilities, including a zero-day.

    newswww.securityweek.comMay 16, 2024, 8:36 AM
  • Google fixes sixth actively exploited Chrome zero-day this yearSecurity Affairs

    Google released emergency security updates to address an actively exploited Chrome zero-day vulnerability. Google has released emergency security updates to address a high-severity zero-day vulnerability vulnerability, tracked as CVE-2024-4761, in the Chrome browser. The vulnerability is an out-of-bounds write issue that resides in the V8 JavaScript engine of the Google web browser. The company confirmed […]

    newssecurityaffairs.comMay 14, 2024, 10:53 AM
  • Google fixes fifth actively exploited Chrome zero-day this yearSecurity Affairs

    Since the start of the year, Google released an update to fix the fifth actively exploited zero-day vulnerability in the Chrome browser. Google this week released security updates to address a zero-day flaw, tracked as CVE-2024-4671, in Chrome browser. The vulnerability is the fifth zero-day flaw in the Google browser that is exploited in the […]

    newssecurityaffairs.comMay 10, 2024, 11:50 AM
  • Google addressed another Chrome zero-day exploited at Pwn2Own in MarchSecurity Affairs

    Google fixed another Chrome zero-day vulnerability exploited during the Pwn2Own hacking competition in March. Google has addressed another zero-day vulnerability in the Chrome browser, tracked as CVE-2024-3159, that was exploited during the Pwn2Own hacking competition in March, 2024. The vulnerability CVE-2024-3159 is an out of bounds memory access in V8 JavaScript engine. The flaw was demonstrated […]

    newssecurityaffairs.comApr 3, 2024, 9:13 PM
  • Google Patches Chrome Flaw That Earned Hackers $42,500 at Pwn2OwnSecurityWeek

    Google pushes a new Chrome update to patch another zero-day vulnerability demonstrated at a hacking contest.

    newswww.securityweek.comApr 3, 2024, 10:39 AM
  • Google addressed 2 Chrome zero-days demonstrated at Pwn2Own 2024Security Affairs

    Google addressed two zero-day vulnerabilities in the Chrome web browser that have been demonstrated during the Pwn2Own Vancouver 2024. Google addressed several vulnerabilities in the Chrome web browser this week, including two zero-day vulnerabilities, tracked as CVE-2024-2886 and CVE-2024-2887, which were demonstrated during the Pwn2Own Vancouver 2024 hacking competition. The high-severity vulnerability CVE-2024-2886 is a […]

    newssecurityaffairs.comMar 28, 2024, 12:38 AM
  • Chrome Update Patches Zero-Day Vulnerabilities Exploited at Pwn2OwnSecurityWeek

    Google ships a security-themed Chrome browser refresh to fix flaws exploited at the CanSecWest Pwn2Own hacking contest.

    newswww.securityweek.comMar 27, 2024, 2:35 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence