$ cve CVE-2021-37975 JSON

CVE-2021-37975 KEV

8.8

HIGH · CVSS 3.1 · EPSS 34.9% (pctl 98)

Patch first

On CISA KEV — known exploited in the wild, due 2021-11-17.

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	34.89% — more likely to be exploited than 98% of all CVEs
Weakness	CWE-416
On CISA KEV	yes — remediate by 2021-11-17
Public exploit	none known
Published	2021-10-08
Last modified	2026-06-17

Name	Google Chromium V8 Use-After-Free Vulnerability
Added	2021-11-03
Due	2021-11-17
Vendor / product	Google / Chromium V8
Ransomware use	none reported