PT-2026-46433 · Google · V8+1

303F06E3

·

CVE-2026-10904

·

Published

2026-04-27

·

Updated

2026-08-31

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53
Description An inappropriate implementation in V8, the open-source JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within a sandbox by enticing a user to open a specially crafted HTML page.
Recommendations Update to version 149.0.7827.53 or later.

Fix

DoS

RCE

Code Injection

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-20CWE-94CWE-119

Related Identifiers

BDU:2026-12908
CVE-2026-10904
ECHO-E9A0-D585-24D0
OPENSUSE-SU-2026:10958-1
OPENSUSE-SU-2026:21135-1

Affected Products

Google Chrome
V8