CVE Catalog

CVE-2026-76047

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

32th percentile - higher than 32% of all known CVEs

Summary

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code within the browser context, potentially leading to session hijacking, data theft, or further privilege escalation.

Recommendation

Update Google Chrome to version 151.0.7922.169 or later, which includes the fix. Users should also enable automatic browser updates.

Original NVD description (English source)

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS