CVE-2026-6307

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101

Description A type confusion issue exists in the Turbofan JIT compiler within the V8 engine. This flaw occurs during CSE/GVN FrameState merging and JS-to-Wasm deoptimization. A remote attacker can exploit this by inducing the browser to load a specially crafted HTML page, allowing the execution of arbitrary code inside a sandbox. The issue enables arbitrary renderer read/write capabilities and a V8 sandbox escape.

Recommendations Update Google Chrome to version 147.0.7727.101 or later.