Exploited Vulnerabilities Daily
🌐 English

Home › Google

CVE-2021-38003: Google Chromium V8

EPSS38.5%No. 949 of 1739 in KEV
CVE year2021listed the same year
Same vendor in KEV75
Same product41
FieldValue
VendorGoogle
ProductChromium V8
NameGoogle Chromium V8 Memory Corruption Vulnerability
Added to KEV2021-11-03
US federal due date2021-11-17
Ransomware useUnknown
CWECWE-122, CWE-755

CISA description

Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2026-87491Google Chromium V82026-09-093.1%Unknown
CVE-2026-85046Google Chromium V82026-09-0448.8%Unknown
CVE-2026-11645Google Chromium V82026-06-092.4%Unknown
CVE-2026-3910Google Chromium V82026-03-131.0%Unknown
CVE-2025-13223Google Chromium V82025-11-195.0%Unknown
CVE-2025-10585Google Chromium V82025-09-235.3%Unknown
CVE-2025-6554Google Chromium V82025-07-0214.1%Unknown
CVE-2025-5419Google Chromium V82025-06-057.8%Unknown
CVE-2024-7965Google Chromium V82024-08-2818.5%Unknown
CVE-2024-7971Google Chromium V82024-08-2621.1%Unknown
CVE-2024-5274Google Chromium V82024-05-287.4%Unknown
CVE-2024-4947Google Chromium V82024-05-2015.2%Unknown
CVE-2024-4761Google Chromium V82024-05-1611.0%Unknown
CVE-2023-4762Google Chromium V82024-02-0641.3%Unknown
CVE-2024-0519Google Chromium V82024-01-173.8%Unknown

NVD — CVE-2021-38003

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Google Chromium V8 vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.