“CVE-2024-5274 is the eighth actively exploited vulnerability that Google fixed in Chrome since the beginning of the year, and the third this month.”
It’s May and Chrome is at eight exploited zero-days, three of them this month. CVE-2024-5274 is a type confusion in V8, and five of the eight sit in that same JavaScript engine. Google’s own researcher found it, and Google won’t share details. The world’s dominant browser keeps losing the same fight in the same component.