PT-2026-54698 · Google · V8+1
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 150.0.7871.46
Description
A type confusion issue exists in the V8 JavaScript engine, which can be triggered via a crafted HTML page. This flaw allows a remote attacker to execute arbitrary code within a sandbox. The issue stems from a Just-In-Time (JIT) compilation bug where sloppy mode breaks JIT assumptions.
Recommendations
Update Google Chrome to version 150.0.7871.46 or later.
Fix
DoS
RCE
Type Confusion
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Google Chrome
V8