PT-2026-31483

CVE-2026-5865

Published

2026-04-07

Updated

2026-08-31

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55

Description A type confusion issue exists in the V8 JavaScript engine. This allows a remote attacker to execute arbitrary code inside a sandbox by utilizing a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a type that is different from the type it was originally allocated, leading to memory corruption or unexpected behavior.

Recommendations Update to version 147.0.7727.55 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')

Related identifiers

CVE-2026-5865