PT-2026-41069

CVE-2026-8540

Published

2026-05-12

Updated

2026-08-31

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168

Description A type confusion issue in V8 allows a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a type that is different from the type it was originally allocated with.

Recommendations Update to version 148.0.7778.168 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')

Related identifiers

CVE-2026-8540

BDU:2026-10927

ECHO-1D36-8AA9-DE23