Out of bounds memory access in V8

CISA Known Exploited Vulnerability

Listed:

Jun 9, 2026 · federal remediation due Jun 23, 2026

Required action:

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Ransomware use:

Unknown

KEV is a prioritization signal from CISA — remediation detail still comes from the vendor advisory.