{"metadata": {"vulnerability": "CVE-2024-7971", "count": 140, "kinds": {"milestone": 17, "sighting": 49, "kev": 11, "other": 63}}, "data": [{"timestamp": "2024-08-19T19:17:20.787Z", "date_only": false, "value": "2024-08-19T19:17:20.787Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.dateReserved"}, {"timestamp": "2024-08-21T00:00:00Z", "date_only": true, "value": "2024-08-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0706", "record": "CERTFR-2024-AVI-0706", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Chrome", "record": "CVE-2024-7971", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-21T21:15:09Z", "date_only": false, "value": "2024-08-21T21:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-PQ5W-H3JM-M95C", "record": "GHSA-PQ5W-H3JM-M95C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-08-21T21:15:09.277Z", "date_only": false, "value": "2024-08-21T21:15:09.277", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7971", "record": "FKIE_CVE-2024-7971", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-21T21:30:46Z", "date_only": false, "value": "2024-08-21T21:30:46Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-PQ5W-H3JM-M95C", "record": "GHSA-PQ5W-H3JM-M95C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-21T22:00:00Z", "date_only": false, "value": "2024-08-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-21T22:00:00Z", "date_only": false, "value": "2024-08-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-21T22:00:00Z", "date_only": false, "value": "2024-08-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "vulnerabilities.6.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-22T00:00:00Z", "date_only": true, "value": "2024-08-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0711", "record": "CERTFR-2024-AVI-0711", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-08-22T00:00:00Z", "date_only": false, "value": "2024-08-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0706", "record": "CERTFR-2024-AVI-0706", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-22T00:06:47Z", "date_only": false, "value": "2024-08-22T00:06:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/3829", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "c4f230f2-c870-429d-a083-261dea0e6716", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-7971 - Google Chrome V8 Type Confusion Heap Corruption\", \n  \"Content\": \"CVE ID : CVE-2024-7971 \nPublished : Aug. 21, 2024, 9:15 p.m. | 42\u00a0minutes ago \nDescription : Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High) \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/3829"}, {"timestamp": "2024-08-22T04:00:00Z", "date_only": false, "value": "2024-08-22T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1356", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "85c495c0-eee6-4c6b-a3b7-79b28be278ec", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1356"}, {"timestamp": "2024-08-22T07:29:01Z", "date_only": false, "value": "2024-08-22T07:29:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5457", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "839cd7ba-504f-4ad9-b421-ffdf8a18baf8", "content": "\u26a0\ufe0f URGENT: Google has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited. \n \nThis #vulnerability could let attackers compromise your system via a malicious HTML page. \n \nDetails: https://thehackernews.com/2024/08/google-fixes-high-severity-chrome-flaw.html \n \nEnsure your browser is updated now.", "url": "https://t.me/thehackernews/5457", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T08:50:04Z", "date_only": false, "value": "2024-08-22T08:50:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/443", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "2161c460-2a06-4ee4-81d7-4e891fe7941a", "content": "\u26a1\ufe0fGoogle has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited.\n\nThis #vulnerability could let attackers compromise your system via a malicious HTML page.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/443", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T09:50:38Z", "date_only": false, "value": "2024-08-22T09:50:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/18479", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "a3aeadf5-8ee8-4844-9822-af66fa41f32f", "content": "The Hacker News\nGoogle Fixes High-Severity Chrome Flaw Actively Exploited in the Wild\n\nGoogle has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has come under active exploitation in the wild.\nTracked as CVE-2024-7971, the vulnerability has been described as a type confusion bug in the V8 JavaScript and WebAssembly engine.\n\"Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap", "url": "https://t.me/tengkorakcybercrewz/18479", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T09:50:38Z", "date_only": false, "value": "2024-08-22T09:50:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/tengkorakcybercrewz/3694", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "24f917c0-2265-4eb6-bac0-ffb28fe63a8d", "content": "The Hacker News\nGoogle Fixes High-Severity Chrome Flaw Actively Exploited in the Wild\n\nGoogle has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has come under active exploitation in the wild.\nTracked as CVE-2024-7971, the vulnerability has been described as a type confusion bug in the V8 JavaScript and WebAssembly engine.\n\"Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap", "url": "https://t.me/tengkorakcybercrewz/3694", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T09:50:39Z", "date_only": false, "value": "2024-08-22T09:50:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/KTEcrkg9JxS1CR8m97XbCcXpstEtqQB-DIKQKZo4M7wXdA", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "2e3aeaa0-4bbd-4c55-b90a-7be84a27a86f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T10:01:50Z", "date_only": false, "value": "2024-08-22T10:01:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/ls7LTkUprfj71wU-c-Lecek5mZMmZLmif3-MdlwsohpwAw", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "2255cf5e-6862-48e5-ba81-53948dd30419", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T10:30:22Z", "date_only": false, "value": "2024-08-22T10:30:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/2444", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "cb805228-67b0-4e7d-bf4c-f49fe9b1ac6f", "content": "Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild\nhttps://thehackernews.com/2024/08/google-fixes-high-severity-chrome-flaw.html\n\nGoogle has rolled out security fixes to address a high-severity security flaw in its Chrome browser that it said has come under active exploitation in the wild.\nTracked as CVE-2024-7971, the vulnerability has been described as a type confusion bug in the V8 JavaScript and WebAssembly engine.\n\"Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap", "url": "https://t.me/KomunitiSiber/2444", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T11:42:49.629Z", "date_only": false, "value": "2024-08-22T11:42:49.629133Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0351", "record": "NCSC-2024-0351", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-22T11:42:49.629Z", "date_only": false, "value": "2024-08-22T11:42:49.629133Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2024-0351", "record": "NCSC-2024-0351", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-22T12:06:25Z", "date_only": false, "value": "2024-08-22T12:06:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/InfoSecInsider/15", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "18c95712-5246-4c8d-b591-1f0e84a76ee8", "content": "\u26a1\ufe0fGoogle has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited.\n\nThis #vulnerability could let attackers compromise your system via a malicious HTML page.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/15", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T12:06:25Z", "date_only": false, "value": "2024-08-22T12:06:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/InfoSecInsider/23479", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "c08cf6b7-c7c0-4b8d-8cf1-fec4a3ec96a7", "content": "\u26a1\ufe0fGoogle has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited.\n\nThis #vulnerability could let attackers compromise your system via a malicious HTML page.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/23479", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T12:21:40Z", "date_only": false, "value": "2024-08-22T12:21:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackingInsights/10917", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "105e24b8-7910-47d6-81b7-39d82e33a846", "content": "\u200aUrgent Chrome Update: Active Zero-Day Exploit Detected (CVE-2024-7971)\n\nhttps://securityonline.info/urgent-chrome-update-active-zero-day-exploit-detected-cve-2024-7971/", "url": "https://t.me/HackingInsights/10917", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-22T22:00:00Z", "date_only": false, "value": "2024-08-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1917", "record": "WID-SEC-W-2024-1917", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-22T22:00:00Z", "date_only": false, "value": "2024-08-22T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1917", "record": "WID-SEC-W-2024-1917", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-22T22:00:00Z", "date_only": false, "value": "2024-08-22T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1917", "record": "WID-SEC-W-2024-1917", "field": "vulnerabilities.5.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-22T22:00:00Z", "date_only": false, "value": "2024-08-22T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1917", "record": "WID-SEC-W-2024-1917", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-23T00:00:00Z", "date_only": false, "value": "2024-08-23T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14285-1", "record": "OPENSUSE-SU-2024:14285-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-23T00:00:00Z", "date_only": false, "value": "2024-08-23T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14285-1", "record": "OPENSUSE-SU-2024:14285-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-23T00:00:00Z", "date_only": false, "value": "2024-08-23T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14285-1", "record": "OPENSUSE-SU-2024:14285-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-08-23T00:00:00Z", "date_only": false, "value": "2024-08-23T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14285-1", "record": "OPENSUSE-SU-2024:14285-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-23T00:00:00Z", "date_only": false, "value": "2024-08-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0711", "record": "CERTFR-2024-AVI-0711", "field": "revisions.0.revision_date"}, {"timestamp": "2024-08-23T04:00:00Z", "date_only": false, "value": "2024-08-23T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1357", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "34412e2c-f45b-484d-bd53-9a1fcc4abde9", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1357"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-1", "record": "OPENSUSE-SU-2024:0258-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-2", "record": "OPENSUSE-SU-2024:0258-2", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-1", "record": "OPENSUSE-SU-2024:0258-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-2", "record": "OPENSUSE-SU-2024:0258-2", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-1", "record": "OPENSUSE-SU-2024:0258-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-2", "record": "OPENSUSE-SU-2024:0258-2", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-1", "record": "OPENSUSE-SU-2024:0258-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-23T09:15:52Z", "date_only": false, "value": "2024-08-23T09:15:52Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-2", "record": "OPENSUSE-SU-2024:0258-2", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-08-23T09:36:17.043Z", "date_only": false, "value": "2024-08-23T09:36:17.043+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1917", "record": "WID-SEC-W-2024-1917", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-23T12:59:41.787Z", "date_only": false, "value": "2024-08-23T12:59:41.787815Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2024-0351", "record": "NCSC-2024-0351", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-08-23T12:59:41.787Z", "date_only": false, "value": "2024-08-23T12:59:41.787815Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2024-0351", "record": "NCSC-2024-0351", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-08-25T22:00:00Z", "date_only": false, "value": "2024-08-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2024-7971", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "9249982c-d874-42e8-b08b-94b165cc561e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2024-7971", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "886b1a42-9964-46fc-9bab-cb445f48653e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": true, "value": "2024-08-26", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7971", "field": "containers.adp.0.metrics.2.other.content.dateAdded"}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2024-7971", "field": "evidence.0.details.added_date", "uuid": "886b1a42-9964-46fc-9bab-cb445f48653e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": true, "value": "2024-08-26", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2024-7971", "field": "evidence.0.details.date_added", "uuid": "9249982c-d874-42e8-b08b-94b165cc561e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2024-7971", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "9249982c-d874-42e8-b08b-94b165cc561e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2024-7971", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "886b1a42-9964-46fc-9bab-cb445f48653e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2024-7971", "field": "status.status_updated_at", "uuid": "9249982c-d874-42e8-b08b-94b165cc561e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2024-7971", "field": "status.status_updated_at", "uuid": "886b1a42-9964-46fc-9bab-cb445f48653e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-26T00:00:00Z", "date_only": false, "value": "2024-08-26T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7971", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2024-08-26T14:07:05.368Z", "date_only": false, "value": "2024-08-26T14:07:05.368281Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7971", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2024-08-26T14:07:05.368Z", "date_only": false, "value": "2024-08-26T14:07:05.368281Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7971", "record": "FKIE_CVE-2024-7971", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-08-26T21:10:02Z", "date_only": false, "value": "2024-08-26T21:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "6b14cf49-e8f0-409f-aaec-16a326f5c5b1"}, {"timestamp": "2024-08-26T22:00:00Z", "date_only": false, "value": "2024-08-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-08-27T13:43:25Z", "date_only": false, "value": "2024-08-27T13:43:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6135", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "34845cb8-84d0-461e-bb97-adc0f8be4a5f", "content": "Google \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 128.\n\n\u041c\u0435\u043d\u0435\u0435 \u0447\u0435\u043c \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome 128 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 0-day \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u0440\u0443\u0433\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-7965 \u0441 CVSS 8,8 \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 JavaScript V8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446.\n\n\u041f\u043e \u0441\u0443\u0442\u0438, \u0435\u0441\u043b\u0438 \u0436\u0435\u0440\u0442\u0432\u0430 \u043f\u043e\u0441\u0435\u0449\u0430\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438\u043b\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u0438\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Google \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0430\u043a \u043d\u0443\u043b\u044c.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0432\u0435\u0431-\u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 Chromium, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a Edge \u0438 Opera.\n\nCVE-2024-7965 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 Chrome \u0434\u043e 128.0.6613.84, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0441\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f 37 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f CVE-2024-7971 - \u043e\u0448\u0438\u0431\u043a\u0443 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 V8, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a 0-day.\n\n\u0414\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-7971 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0438 CISA, \u043e\u0434\u043d\u0430\u043a\u043e \u0438 \u043e\u043d\u0430 \u043d\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "url": "https://t.me/true_secator/6135", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-29T09:08:07Z", "date_only": false, "value": "2024-08-29T09:08:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackingInsights/11489", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "67a700ce-fce5-4005-b049-b14fbd7fe4ff", "content": "\u200aGoogle Chrome Faces Double Blow with New Zero-Day Flaw Exploits: CVE-2024-7965 and CVE-2024-7971\n\nhttps://securityonline.info/google-chrome-faces-double-blow-with-new-zero-day-flaw-exploits-cve-2024-7965-and-cve-2024-7971/", "url": "https://t.me/HackingInsights/11489", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-29T13:50:11Z", "date_only": false, "value": "2024-08-29T13:50:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/HackerOne/3705", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "bb6f3004-f105-4646-87e0-4deb05a2032d", "content": "CVE-2024-7971", "url": "https://t.me/HackerOne/3705"}, {"timestamp": "2024-08-29T22:00:00Z", "date_only": false, "value": "2024-08-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2024-08-31T03:31:59Z", "date_only": false, "value": "2024-08-31T03:31:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/20593", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "a30125c2-08a3-4e56-8f4a-fed8a107e814", "content": "\u200aNorth Korean hackers exploit Chrome zero-day to deploy rootkit\n\nNorth Korean hackers have exploited a recently patched Google Chrome zero-day (CVE-2024-7971) to deploy the FudModule rootkit after gaining SYSTEM privileges using a Windows Kernel exploit. [...]\n\nhttps://www.bleepingcomputer.com/news/security/north-korean-hackers-exploit-chrome-zero-day-to-deploy-rootkit/", "url": "https://t.me/BleepingComputer/20593", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-31T07:46:57Z", "date_only": false, "value": "2024-08-31T07:46:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/52826", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "2cab8f0e-7682-4f03-9471-43fafadad554", "content": "Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day\nhttps://www.securityweek.com/microsoft-says-north-korean-cryptocurrency-thieves-behind-chrome-zero-day/\n\nRedmond's threat intel team said exploitation of CVE-2024-7971 can be attributed to a North Korean APT targeting the cryptocurrency sector for financial gain. \nThe post Microsoft Says North Korean Cryptocurrency Thieves Behind Chrome Zero-Day (https://www.securityweek.com/microsoft-says-north-korean-cryptocurrency-thieves-behind-chrome-zero-day/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/52826", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-31T12:12:06Z", "date_only": false, "value": "2024-08-31T12:12:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KimJongPwn/21951", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ebac51bc-eb44-4c46-8980-783b225baf68", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/KimJongPwn/21951", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-31T12:12:06Z", "date_only": false, "value": "2024-08-31T12:12:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KimJongPwn/866", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "a86aef74-9357-416f-a6f1-1756aa4c4e30", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/KimJongPwn/866", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-31T13:00:15.239Z", "date_only": false, "value": "2024-08-31T13:00:15.239Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-7971", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-31T15:07:00Z", "date_only": false, "value": "2024-08-31T15:07:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KLN_Hack/24", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "55b9f62c-fad0-44a2-ac44-79fcca01c38c", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/KLN_Hack/24", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-01T09:54:33Z", "date_only": false, "value": "2024-09-01T09:54:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/512", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ecff1a49-d97a-4d27-8668-3487bba3f988", "content": "\u26a1\ufe0fCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/512"}, {"timestamp": "2024-09-01T13:28:00Z", "date_only": false, "value": "2024-09-01T13:28:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/InfoSecInsider/23607", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "f0f5bcd2-430c-4a8a-9cef-bd207cac7a47", "content": "\u26a1\ufe0fCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/23607"}, {"timestamp": "2024-09-01T13:28:01Z", "date_only": false, "value": "2024-09-01T13:28:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/InfoSecInsider/130", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "c2f9272f-6424-4ac8-8ee1-4afb44360f8d", "content": "\u26a1\ufe0fCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day.\n\n#CyberBulletin", "url": "https://t.me/InfoSecInsider/130", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-02T16:36:37Z", "date_only": false, "value": "2024-09-02T16:36:37Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0275-1", "record": "OPENSUSE-SU-2024:0275-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-09-02T16:36:37Z", "date_only": false, "value": "2024-09-02T16:36:37Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0275-1", "record": "OPENSUSE-SU-2024:0275-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-09-02T16:36:37Z", "date_only": false, "value": "2024-09-02T16:36:37Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0275-1", "record": "OPENSUSE-SU-2024:0275-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-09-02T16:36:37Z", "date_only": false, "value": "2024-09-02T16:36:37Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0275-1", "record": "OPENSUSE-SU-2024:0275-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2024-09-02T20:34:37Z", "date_only": false, "value": "2024-09-02T20:34:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/16341", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "5e631d53-d1b6-490a-a5df-3221dbb43e56", "content": "\u0421\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 0-day \u0432 Chrome \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0440\u0443\u0442\u043a\u0438\u0442\u043e\u0432\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430, \u0447\u0442\u043e \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b Citrine Sleet \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Google Chrome (CVE-2024-7971) \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0443\u0442\u043a\u0438\u0442\u0430 FudModule. \u041c\u0430\u043b\u0432\u0430\u0440\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0431\u0430\u0433\u0430 \u0432 \u044f\u0434\u0440\u0435 Windows.\n\nhttps://xakep.ru/2024/09/02/cve-2024-7971-citrine-sleet/", "url": "https://t.me/xakep_ru/16341", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-02T22:00:00Z", "date_only": false, "value": "2024-09-02T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2024-09-05T19:00:06Z", "date_only": false, "value": "2024-09-05T19:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6173", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "f55da74f-1d9e-4acd-8982-238411ee3696", "content": "\u0412 \u0446\u0435\u043b\u043e\u043c \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043d\u0430 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043a\u0430\u0440\u0442\u0438\u043d\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c.\n\nGoogle \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0434\u0432\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f Chrome 128 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f 8 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 6 \u0448\u0435\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Microsoft, \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Chrome CVE-2024-7971 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u043d\u0443\u043b\u044c \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 Citrine Sleet, \u0447\u0442\u043e \u0434\u043b\u044f \u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0438\u0445 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u0441\u0442\u0430\u043b\u043e \u0443\u0436\u0435 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0435\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, PixiePoint \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2024-38106, \u043d\u0443\u043b\u0435 \u0432 \u044f\u0434\u0440\u0435 Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0442\u0430\u043a\u0436\u0435 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0430\u0441\u044c Citrine Sleet \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e.\n\nSecureLayer7 \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 CVE-2024-37084 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Skipper Spring Cloud Data Flow, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 \u0438\u044e\u043b\u0435.\n\nRCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 Yaml, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b, \u0447\u0442\u043e \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0435\u0441\u043b\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 YAML.\n\nVMware \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\u00a0\u0434\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Fusion, \u0430 \u0434\u043b\u044f \u043a\u0430\u043c\u0435\u0440 AVTech \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0441\u044f \u043d\u043e\u0432\u044b\u0439 PoC\u00a0(\u0441\u0442\u0430\u0440\u044b\u0439 \u0437\u0434\u0435\u0441\u044c), \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e 0-day CVE-2024-7029, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c Fudgedotdotdot \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043e\u0431\u0437\u043e\u0440 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n\u041f\u043e\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0410\u043b\u0435\u043a\u0441\u0430\u043d\u0434\u0440 \u0427\u0435\u0440\u043d\u0435\u043d\u044c\u043a\u043e\u0432 \u0438 \u0421\u0435\u0440\u0433\u0435\u0439 \u0413\u043e\u0440\u0434\u0435\u0439\u0447\u0438\u043a, \u043e\u043a\u0430\u0437\u0430\u0432\u0448\u0438\u0435 \u043f\u043e\u043c\u043e\u0449\u044c \u0432 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Webmin, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0433\u043b\u0430 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 Loop DoS (CVE-2024-2169). \n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c Webmin - \u044d\u0442\u043e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 1 000 000 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \n\nWebmin/Virtualmin \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 UDP, \u043e\u0431\u044b\u0447\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0435 \u043d\u0430 \u043f\u043e\u0440\u0442\u0443 UDP/10000.\n\n\u042d\u0442\u0430 \u0441\u043b\u0443\u0436\u0431\u0430 \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 UDP IP-\u0430\u0434\u0440\u0435\u0441\u043e\u043c \u0438 \u043f\u043e\u0440\u0442\u043e\u043c, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0422\u0430\u043a\u043e\u0435 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 Loop DoS \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 UDP \u0441 \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c ip-\u043f\u043e\u0440\u0442\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0433\u043e IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430 Webmin, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0431\u0435\u0441\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c\u0443 \u043e\u0431\u043c\u0435\u043d\u0443 \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u043c\u0435\u0436\u0434\u0443 \u0445\u043e\u0441\u0442\u0430\u043c\u0438, \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 (DOS) \u0438/\u0438\u043b\u0438 \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u0435\u043d\u0438\u044e \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438.", "url": "https://t.me/true_secator/6173", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-08T17:47:05Z", "date_only": false, "value": "2024-09-08T17:47:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/HackingInsights/12360", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "86a68fdc-50c3-46ef-937b-35c8b9a0bfa7", "content": "\u200aNorth Korea-linked APT Citrine Sleet exploit Chrome zero-day to deliver FudModule rootkit\n\nhttps://securityaffairs.com/167848/breaking-news/north-korea-linked-apt-exploited-chrome-zero-day-cve-2024-7971.html", "url": "https://t.me/HackingInsights/12360", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-08T17:47:05Z", "date_only": false, "value": "2024-09-08T17:47:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/HackingInsights/12357", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "a46cfa4e-5792-46ed-ac38-245f457f731c", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/HackingInsights/12357", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-09-11T00:00:00Z", "date_only": true, "value": "2024-09-11", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0770", "record": "CERTFR-2024-AVI-0770", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2024-09-12T00:00:00Z", "date_only": false, "value": "2024-09-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2024-AVI-0770", "record": "CERTFR-2024-AVI-0770", "field": "revisions.0.revision_date"}, {"timestamp": "2024-09-16T00:00:00Z", "date_only": true, "value": "2024-09-16", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2024-7971", "field": "evidence.0.details.due_date", "uuid": "9249982c-d874-42e8-b08b-94b165cc561e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-10-27T23:00:00Z", "date_only": false, "value": "2024-10-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2024-12-01T23:00:00Z", "date_only": false, "value": "2024-12-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2024-12-01T23:00:00Z", "date_only": false, "value": "2024-12-01T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.current_release_date"}, {"timestamp": "2024-12-02T11:34:07.782Z", "date_only": false, "value": "2024-12-02T11:34:07.782+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2024-1901", "record": "WID-SEC-W-2024-1901", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-05T00:00:00Z", "date_only": false, "value": "2024-12-05T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14548-1", "record": "OPENSUSE-SU-2024:14548-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-05T00:00:00Z", "date_only": false, "value": "2024-12-05T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14548-1", "record": "OPENSUSE-SU-2024:14548-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-05T00:00:00Z", "date_only": false, "value": "2024-12-05T00:00:00Z", "kind": "other", "label": "Impact", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14548-1", "record": "OPENSUSE-SU-2024:14548-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-12-05T00:00:00Z", "date_only": false, "value": "2024-12-05T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14548-1", "record": "OPENSUSE-SU-2024:14548-1", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-02-08T23:20:43Z", "date_only": false, "value": "2025-02-08T23:20:43.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_CVEAlerts/3897", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "eba320a4-797d-418f-a777-3d6ffb39e029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-7971\n\ud83c\udfe2 Vendor: Google\n\ud83d\udda5\ufe0f Product: Chromium V8\n\ud83d\udd39 Description: Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\ud83d\udccf Published: 2024-08-21T00:00:00Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json\n2. https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit\n3. https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html\n4. https://www.microsoft.com/en-us/security/blog/2024/08/30/north-korean-threat-actor-citrine-sleet-exploiting-chromium-zero-day/\n5. https://www.gendigital.com/blog/news/innovation/lazarus-fudmodule-v3\n6. https://www.cyfirma.com/research/apt-quarterly-highlights-q3-2024/\n7. https://global.ptsecurity.com/analytics/cybersecurity-threatscape-2024-q3\n8. https://www.gendigital.com/blog/insights/reports/threat-report-q3-2024", "url": "https://t.me/DarkWebInformer_CVEAlerts/3897", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-02-23T02:10:57Z", "date_only": false, "value": "2025-02-23T02:10:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "13e24dfc-407a-4543-83ea-8b9bbd92af68"}, {"timestamp": "2025-04-12T23:51:06.547Z", "date_only": false, "value": "2025-04-12T23:51:06.547882Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mistymntncop.bsky.social/post/3lmnpz2o65s26", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "d82636b2-54ce-4ea5-8f5b-43cf7cca2049", "url": "https://bsky.app/profile/mistymntncop.bsky.social/post/3lmnpz2o65s26"}, {"timestamp": "2025-10-21T22:55:46.906Z", "date_only": false, "value": "2025-10-21T22:55:46.906Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T22:55:46.906Z", "date_only": false, "value": "2025-10-21T22:55:46.906Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-7971", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:33:05Z", "date_only": false, "value": "2025-10-22T00:33:05Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-PQ5W-H3JM-M95C", "record": "GHSA-PQ5W-H3JM-M95C", "field": "modified"}, {"timestamp": "2026-02-02T12:25:39Z", "date_only": false, "value": "2026-02-02T12:25:39+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2024-7971", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "9249982c-d874-42e8-b08b-94b165cc561e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T12:26:30.619Z", "date_only": false, "value": "2026-02-02T12:26:30.619275Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9249982c-d874-42e8-b08b-94b165cc561e", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "08dfaff9-36fd-48ea-a2de-3b378a4e0a3d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9249982c-d874-42e8-b08b-94b165cc561e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T08:21:35.047Z", "date_only": false, "value": "2026-06-17T08:21:35.047", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-7971", "record": "FKIE_CVE-2024-7971", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:36.162Z", "date_only": false, "value": "2026-06-19T12:46:36.162171Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5144c81d-888c-481a-88a3-1d1500c49ca6", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "42bee9b6-e3b1-4053-b155-627834739cf5", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5144c81d-888c-481a-88a3-1d1500c49ca6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2024-7971", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "886b1a42-9964-46fc-9bab-cb445f48653e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:57.184Z", "date_only": false, "value": "2026-06-23T14:05:57.184398Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/886b1a42-9964-46fc-9bab-cb445f48653e", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ede7ccf9-335a-4b5d-8c98-0902761ddb4b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/886b1a42-9964-46fc-9bab-cb445f48653e", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-06T11:00:04.485Z", "date_only": false, "value": "2026-07-06T11:00:04.485064Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/321", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "0309f154-90e4-4a2d-82d8-7fb8ff4ba1b6", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u043a\u0440\u0430\u0436\u0430\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b\n\n\ud83d\udd13 \u0421\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Citrine Sleet \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2024-7971 \u0432 Google Chrome \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u044b. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Windows, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0436\u0435\u0440\u0442\u0432.\n\n\ud83d\udcb8 \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0433\u0434\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u0443\u044e \u0432\u044b\u0433\u043e\u0434\u0443. Citrine Sleet \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0441\u0432\u043e\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u043e\u0439 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0438.\n\n\u2699\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 Chrome, \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 Google \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434, \u043d\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0443\u0449\u0435\u0440\u0431. \u0420\u0443\u0442\u043a\u0438\u0442 FudModule, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.\n\n#Chrome #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430 #\u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0430 #CitrineSleet\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/321"}, {"timestamp": "2026-07-06T11:00:04.964Z", "date_only": false, "value": "2026-07-06T11:00:04.964607Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/304", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "e9cd9977-cd32-4ff1-96c5-7ebd69481c6f", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome\n\n\ud83d\udcbb Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2024-7971 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Type Confusion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\ud83c\udf10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0445\u043e\u0442\u044f Google \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e \u0442\u0440\u0435\u0442\u044c\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 V8, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f Google \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\ud83d\udd04 \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u043d\u0430 Windows, Linux \u0438 macOS \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 128.0.6613.84. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/304"}, {"timestamp": "2026-07-11T20:00:05.996Z", "date_only": false, "value": "2026-07-11T20:00:05.996349Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/321", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "a2ccb936-1074-4d2d-9341-811ef5089578", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u043a\u0440\u0430\u0436\u0430\u043c \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b\n\n\ud83d\udd13 \u0421\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Citrine Sleet \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2024-7971 \u0432 Google Chrome \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0435 \u0430\u043a\u0442\u0438\u0432\u044b. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u043b\u0443\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044f\u0434\u0440\u0435 Windows, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0436\u0435\u0440\u0442\u0432.\n\n\ud83d\udcb8 \u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043b\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0433\u0434\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0441\u0442\u0440\u0435\u043c\u044f\u0442\u0441\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u0443\u044e \u0432\u044b\u0433\u043e\u0434\u0443. Citrine Sleet \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0441\u0432\u043e\u0438\u043c\u0438 \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u0440\u0430\u043d\u0435\u0435 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u043e\u0439 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0438.\n\n\u2699\ufe0f \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 Chrome, \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 Google \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434, \u043d\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0443\u0449\u0435\u0440\u0431. \u0420\u0443\u0442\u043a\u0438\u0442 FudModule, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u0430\u043c\u0438 \u044f\u0434\u0440\u0430.\n\n#Chrome #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430 #\u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0430 #CitrineSleet\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/321", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-11T21:00:04.014Z", "date_only": false, "value": "2026-07-11T21:00:04.014401Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ZerodayAlert/304", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ec8b0118-4827-4749-ae42-001e2c91ee17", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Chrome\n\n\ud83d\udcbb Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f Chrome, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f CVE-2024-7971 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Type Confusion \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n\ud83c\udf10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438, \u0445\u043e\u0442\u044f Google \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445. \u042d\u0442\u043e \u0442\u0440\u0435\u0442\u044c\u044f \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 V8, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f Google \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\ud83d\udd04 \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Chrome \u043d\u0430 Windows, Linux \u0438 macOS \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 128.0.6613.84. \u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Chromium \u0442\u0430\u043a\u0436\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0438\u0445 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0438.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 #\u0434\u0430\u043d\u043d\u044b\u0435\u0432\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/304", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-12T22:00:15.004Z", "date_only": false, "value": "2026-07-12T22:00:15.004821Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/11268", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "12912033-795e-4154-a78f-bb335863baba", "content": "\u2757\ufe0fCrackers norcoreanos aprovechan #vulnerabilidad de Chrome CVE-2024-7971 (parche ya disponible) para robar criptomonedas.\nhttps://acortar.link/I7bxI6", "url": "https://t.me/pleyades_it/11268"}, {"timestamp": "2026-07-12T22:00:15.083Z", "date_only": false, "value": "2026-07-12T22:00:15.083806Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pleyades_it/11241", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "b4091611-e383-40bb-807d-370e3b6083c1", "content": "\u26a0\ufe0f Google parchea #vulnerabilidad tipo #zeroday de gravedad alta en Google Chrome (CVE-2024-7971).\n\ud83d\udc49\ud83c\udffb Actualiza ya.\nhttps://acortar.link/NUxYFs", "url": "https://t.me/pleyades_it/11241"}, {"timestamp": "2026-07-17T11:00:04.684Z", "date_only": false, "value": "2026-07-17T11:00:04.684454Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rtinfobez/107", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ba77a48a-93bc-42e5-9c2e-95a62547fe66", "content": "\u26a0\ufe0f\ud83d\udc0d \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437\u044b: Lazarus (APT38, Lazer Werewolf, Diamond Sleet, Labyrinth Chollima, Hidden Cobra)\n\nLazarus \u2014 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u0430 \u0441 2009 \u0433\u043e\u0434\u0430. \u041e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u0435\u0435 \u0430\u0442\u0430\u043a \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0443\u044e \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u044e.\n\n\ud83d\udcb8 \u0423\u0449\u0435\u0440\u0431:\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0421\u043e\u0432\u0435\u0442\u0430 \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041e\u041e\u041d, \u0441 2017 \u043f\u043e 2024 \u0433\u043e\u0434 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u0443 \u043d\u0430 \u0441\u0443\u043c\u043c\u0443 \u043f\u043e\u0440\u044f\u0434\u043a\u0430 3,6 \u043c\u043b\u0440\u0434 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0421\u0428\u0410.\n\n\ud83c\udf0e \u0413\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u044f \u0430\u0442\u0430\u043a:\n\u0410\u0442\u0430\u043a\u0438 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u043a\u043e\u043d\u0442\u0438\u043d\u0435\u043d\u0442\u044b \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u043e\u0442\u0440\u0430\u0441\u043b\u0435\u0439:\n\u00b7  \u0410\u0432\u0438\u0430\u0446\u0438\u043e\u043d\u043d\u043e-\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c,\n\u00b7  \u0412\u043e\u0435\u043d\u043d\u043e-\u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441,\n\u00b7  \u0413\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u043a\u0442\u043e\u0440,\n\u00b7  \u041a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0435 \u0431\u0438\u0440\u0436\u0438,\n\u00b7  \u0421\u0444\u0435\u0440\u0430 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\n\u00b7  \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u2692\ufe0f \u041c\u0435\u0442\u043e\u0434\u044b \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b:\n\u0413\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Lazarus \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Gh0st RAT, MATA, Mimikatz, WannaCry, ProcDump, Responder. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u043a\u0430\u043a LolBins, \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0436\u0435\u043b\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b (PUP), \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, TightVNC \u0438 KillDisk.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u2014 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0432\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438.\n\n\u26d3\ufe0f\u200d\ud83d\udca5 \u0417\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u044d\u043f\u0438\u0437\u043e\u0434\u044b:\n\u00b7  \u041a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Sony Pictures (2014 \u0433.) \u2014 \u043e\u0434\u043d\u0430 \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u0433\u0440\u043e\u043c\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438.\n\u00b7  \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-7971 \u2014 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430, \u0437\u0430\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u043d\u0435\u0434\u0430\u0432\u043d\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b RT Protect SOC \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c\u044e Lazarus, \u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u043c\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043d\u0430 \u043b\u044e\u0431\u044b\u0435 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b.\n\n#\u041f\u0440\u043e\u0444\u0438\u043b\u044c\u041f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430", "url": "https://t.me/rtinfobez/107"}, {"timestamp": "2026-07-21T12:00:03.927Z", "date_only": false, "value": "2026-07-21T12:00:03.927633Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/PicoCorp/78", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "76bab4e5-8ac9-4aa1-b844-0bb7e3939a8c", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/PicoCorp/78"}, {"timestamp": "2026-07-22T00:00:21.627Z", "date_only": false, "value": "2026-07-22T00:00:21.627789Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/PicoCorp/78", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "b1410039-7025-4021-89dc-bb62f1ed14c5", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/PicoCorp/78", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-26T02:02:06.158Z", "date_only": false, "value": "2026-07-26T02:02:06.158382Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3084", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "fc46a03b-48f5-4408-a987-ec821b3d2f54", "content": "Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Chrome\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2024-7971. \u041e\u043d \u043e\u043f\u0438\u0441\u0430\u043d \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 \u0432 \u0434\u0432\u0438\u0436\u043a\u0435 V8 JavaScript \u0438 WebAssembly.\n\n\u00ab\u041f\u0443\u0442\u0430\u043d\u0438\u0446\u0430 \u0442\u0438\u043f\u043e\u0432 \u0432 V8 \u0432 Google Chrome \u0434\u043e 128.0.6613.84 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0438 \u043e\u0448\u0438\u0431\u043a\u0438 \u0432 \u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 NIST (NVD).\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 19 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0438 \u0443\u0436\u0435 \u0447\u0435\u0440\u0435\u0437 3 \u0434\u043d\u044f \u043d\u0430 \u043d\u0435\u0435 \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043f\u0430\u0442\u0447.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0435 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0435\u0440\u0432\u0443\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0443\u0441\u043f\u0435\u043b\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2024-7971 \u2014 \u044d\u0442\u043e \u0442\u0440\u0435\u0442\u044c\u044f \u043e\u0448\u0438\u0431\u043a\u0430 \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 V8 \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443. \u041f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2024-4947 \u0438 CVE-2024-5274.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "url": "https://t.me/EchelonEyes/3084"}, {"timestamp": "2026-08-14T16:00:18.427Z", "date_only": false, "value": "2026-08-14T16:00:18.427461Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/504", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "20c3af34-d095-4643-9a4f-6e5a0036d15e", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-3439 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Everest Forms \u0434\u043b\u044f WordPress, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c PHP-\u043e\u0431\u044a\u0435\u043a\u0442\u044b. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c, \u0435\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 POP (Property-Oriented Programming).\n\n\ud83d\udd35 CVE-2025-27520 \u2014 \u0431\u0430\u0433 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 BentoML, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 deserialize_value() \u0444\u0430\u0439\u043b\u0430 serde.py. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 HTTP-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 BentoML-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u0418\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0434\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u044b, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32896 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Apache SeaTunnel. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0447\u0438\u0442\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e Java-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432.\n\n\ud83d\udd35 CVE-2024-7971 \u2014 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0434\u0432\u0438\u0436\u043a\u043e\u043c JavaScript V8 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Google Chrome. CVE \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u0443\u0442\u0430\u043d\u0438\u0446\u044b \u0442\u0438\u043f\u043e\u0432 (Type Confusion Vulnerability) \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0432\u0435\u0431-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/504"}, {"timestamp": "2026-09-20T19:49:20Z", "date_only": false, "value": "2026-09-20T19:49:20Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-1", "record": "OPENSUSE-SU-2024:0258-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:49:21Z", "date_only": false, "value": "2026-09-20T19:49:21Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-2", "record": "OPENSUSE-SU-2024:0258-2", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:49:28Z", "date_only": false, "value": "2026-09-20T19:49:28Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0275-1", "record": "OPENSUSE-SU-2024:0275-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:17:03Z", "date_only": false, "value": "2026-09-20T21:17:03Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14285-1", "record": "OPENSUSE-SU-2024:14285-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:21:57Z", "date_only": false, "value": "2026-09-20T21:21:57Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14548-1", "record": "OPENSUSE-SU-2024:14548-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-06T07:00:33.487Z", "date_only": false, "value": "2026-10-06T07:00:33.487659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/humancoders.mastodon.social.ap.brid.gy/post/3mx6uamnaamr2", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "68048c23-8ffc-46c3-955f-2dd8ddb3c2d3", "content": "Un simple message Twitch a suffi \u00e0 ex\u00e9cuter du code sur la machine d'un streamer : overlay affichant le chat en HTML brut, Chromium embarqu\u00e9 dans OBS sans sandbox, faille V8 d\u00e9j\u00e0 exploit\u00e9e (CVE-2024-7971). \u2b07\ufe0f [\u2026] \n\n[Original post on mastodon.social]", "url": "https://bsky.app/profile/humancoders.mastodon.social.ap.brid.gy/post/3mx6uamnaamr2"}, {"timestamp": "2026-10-07T21:00:04Z", "date_only": false, "value": "2026-10-07T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XsCqwcFszPjQSwpV59IqFI9CcBBRxT2RNGxlhfy_aazsC9w", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "b1ac712d-6134-46b9-a1e7-bffd4da2a7c0", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-07T21:00:04Z", "date_only": false, "value": "2026-10-07T21:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XsCqwcFszPjQSwpV59IqFI9CcBBRxT2RNGxlhfy_aazsC9w", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "bfc9dbc9-dd90-435f-b18c-c65aefb79e65"}, {"timestamp": "2026-10-11T11:53:30Z", "date_only": false, "value": "2026-10-11T11:53:30Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-1", "record": "OPENSUSE-SU-2024:0258-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:53:30Z", "date_only": false, "value": "2026-10-11T11:53:30Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-1", "record": "OPENSUSE-SU-2024:0258-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:53:31Z", "date_only": false, "value": "2026-10-11T11:53:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-2", "record": "OPENSUSE-SU-2024:0258-2", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:53:31Z", "date_only": false, "value": "2026-10-11T11:53:31Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0258-2", "record": "OPENSUSE-SU-2024:0258-2", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:53:32Z", "date_only": false, "value": "2026-10-11T11:53:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0275-1", "record": "OPENSUSE-SU-2024:0275-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:53:32Z", "date_only": false, "value": "2026-10-11T11:53:32Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:0275-1", "record": "OPENSUSE-SU-2024:0275-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:54:31Z", "date_only": false, "value": "2026-10-11T11:54:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14285-1", "record": "OPENSUSE-SU-2024:14285-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:54:31Z", "date_only": false, "value": "2026-10-11T11:54:31Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14285-1", "record": "OPENSUSE-SU-2024:14285-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-11T11:54:38Z", "date_only": false, "value": "2026-10-11T11:54:38Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14548-1", "record": "OPENSUSE-SU-2024:14548-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:54:38Z", "date_only": false, "value": "2026-10-11T11:54:38Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14548-1", "record": "OPENSUSE-SU-2024:14548-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-21T00:00:00Z", "date_only": true, "value": "2026-10-21", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "last_revision_date"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-26T00:00:00Z", "date_only": false, "value": "2026-10-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1385", "record": "CERTFR-2026-AVI-1385", "field": "revisions.0.revision_date"}], "metrics": {"as_of": "2026-10-29T12:56:02.503Z", "anchors": {"origin": {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2024-08-31T12:12:06Z", "date_only": false, "value": "2024-08-31T12:12:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KimJongPwn/21951", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ebac51bc-eb44-4c46-8980-783b225baf68", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/KimJongPwn/21951", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2024-08-22T07:29:01Z", "date_only": false, "value": "2024-08-22T07:29:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5457", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "839cd7ba-504f-4ad9-b421-ffdf8a18baf8", "content": "\u26a0\ufe0f URGENT: Google has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited. \n \nThis #vulnerability could let attackers compromise your system via a malicious HTML page. \n \nDetails: https://thehackernews.com/2024/08/google-fixes-high-severity-chrome-flaw.html \n \nEnsure your browser is updated now.", "url": "https://t.me/thehackernews/5457", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 40116.222, "hours": 11.143395, "days": 0.464308125, "min_seconds": 40116.222, "max_seconds": 40116.222, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-08-22T07:29:01Z", "date_only": false, "value": "2024-08-22T07:29:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5457", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "839cd7ba-504f-4ad9-b421-ffdf8a18baf8", "content": "\u26a0\ufe0f URGENT: Google has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited. \n \nThis #vulnerability could let attackers compromise your system via a malicious HTML page. \n \nDetails: https://thehackernews.com/2024/08/google-fixes-high-severity-chrome-flaw.html \n \nEnsure your browser is updated now.", "url": "https://t.me/thehackernews/5457", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 40116.222, "hours": 11.143395, "days": 0.464308125, "min_seconds": 40116.222, "max_seconds": 40116.222, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-08-22T07:29:01Z", "date_only": false, "value": "2024-08-22T07:29:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5457", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "839cd7ba-504f-4ad9-b421-ffdf8a18baf8", "content": "\u26a0\ufe0f URGENT: Google has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited. \n \nThis #vulnerability could let attackers compromise your system via a malicious HTML page. \n \nDetails: https://thehackernews.com/2024/08/google-fixes-high-severity-chrome-flaw.html \n \nEnsure your browser is updated now.", "url": "https://t.me/thehackernews/5457", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 834701.222, "hours": 231.86145055555554, "days": 9.660893773148148, "min_seconds": 834701.222, "max_seconds": 834701.222, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2024-08-31T12:12:06Z", "date_only": false, "value": "2024-08-31T12:12:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KimJongPwn/21951", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ebac51bc-eb44-4c46-8980-783b225baf68", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/KimJongPwn/21951", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 69006937.725645, "hours": 19168.59381267917, "days": 798.691408861632, "min_seconds": 69006937.725645, "max_seconds": 69006937.725645, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-21T20:20:24.778Z", "date_only": false, "value": "2024-08-21T20:20:24.778Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-7971", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T12:56:02.503Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 68966821.503645, "hours": 19157.450417679167, "days": 798.227100736632, "min_seconds": 68966821.503645, "max_seconds": 68966821.503645, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-22T07:29:01Z", "date_only": false, "value": "2024-08-22T07:29:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/5457", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "839cd7ba-504f-4ad9-b421-ffdf8a18baf8", "content": "\u26a0\ufe0f URGENT: Google has urgently patched a critical Chrome flaw, CVE-2024-7971, that\u2019s being actively exploited. \n \nThis #vulnerability could let attackers compromise your system via a malicious HTML page. \n \nDetails: https://thehackernews.com/2024/08/google-fixes-high-severity-chrome-flaw.html \n \nEnsure your browser is updated now.", "url": "https://t.me/thehackernews/5457", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T12:56:02.503Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 68172236.503645, "hours": 18936.732362123614, "days": 789.0305150884839, "min_seconds": 68172236.503645, "max_seconds": 68172236.503645, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2024-08-31T12:12:06Z", "date_only": false, "value": "2024-08-31T12:12:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KimJongPwn/21951", "record": "CVE-2024-7971", "field": "creation_timestamp", "uuid": "ebac51bc-eb44-4c46-8980-783b225baf68", "content": "\u200aCVE-2024-7971: North Korean APT Citrine Sleet Exploits Chromium Zero-Day\n\nhttps://securityonline.info/cve-2024-7971-north-korean-apt-citrine-sleet-exploits-chromium-zero-day/", "url": "https://t.me/KimJongPwn/21951", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T12:56:02.503Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}