PT-2026-136628
CVE-2026-121226
·
Published
2026-11-03
·
Updated
2026-11-05
Description by
CVSS 3.1
8.8
HighMetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 157.0.8103.38
Description
A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by the browser. This flaw allows a remote attacker to potentially execute arbitrary code within the sandbox by inducing the browser to process a specially crafted HTML page.
Recommendations
Update Google Chrome to version 157.0.8103.38 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾