PT-2026-31479

CVE-2026-5861

Published

2026-04-07

Updated

2026-08-31

Description by

CVSS 2.0

9.7

High

MetricsAV:N/AC:L/Au:N/C:C/I:P/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55

Description A use-after-free issue in the V8 JavaScript engine in Google Chrome allowed a remote attacker to potentially execute arbitrary code within a sandbox through a specially crafted HTML page. The issue is related to memory corruption and a potential escape from the renderer sandbox.

Recommendations Update Google Chrome to version 147.0.7727.55 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers

CVE-2026-5861

BDU:2026-04906