Home Google CVE-2024-9965
Back to Google

CVE-2024-9965

Google Chrome

Google CVSS 8.8 Updated March 15, 2026

Executive Risk Summary

"A remote attacker could execute arbitrary code on a Windows system via a crafted HTML page if a user is convinced to engage in specific UI gestures. The vulnerability is due to insufficient data validation in DevTools in Google Chrome prior to version 130.0.6723.58."

Operational Audit Arsenal

Target Type Executable
Target Asset chrome.exe
Standard Path %ProgramFiles%\Google\Chrome\Application\chrome.exe
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: chrome.exe (Executable)
$Targets = 'chrome.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unlikely

Web browsing service may be affected

Internal Work Notes

Apply Google Chrome update to version 130.0.6723.58 or later to mitigate arbitrary code execution vulnerability

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Google Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.