PT-2026-102832

CVE-2026-102299

Published

2026-09-04

Updated

2026-10-28

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92

Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the browser to process a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a different type than intended, leading to memory corruption or unexpected behavior.

Recommendations Update Google Chrome to version 154.0.8037.92 or later.

Exploitability

Fix

Impacts

Researchers

Andrew Boni

Vendors

Affected products

Weakness enumeration

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')

Related identifiers

CVE-2026-102299