PT-2026-44691

CVE-2026-9983

Published

2026-05-14

Updated

2026-10-22

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216

Description A type confusion issue exists in Skia, a graphics library. This allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a type that is different from the type it was originally allocated.

Recommendations Update to version 148.0.7778.216 or later.

Exploitability

Fix

Impacts

Researchers

Ggwhyp

Vendors

Affected products

Weakness enumeration

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')

Related identifiers

CVE-2026-9983