PT-2026-81550

CVE-2026-78938

Published

2026-08-12

Updated

2026-11-03

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65

Description A type confusion issue exists in the V8 engine, which is the open-source JavaScript and WebAssembly engine used by Google Chrome. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the browser to process a specially crafted HTML page.

Recommendations Update Google Chrome to version 152.0.7977.65 or later.

Exploitability

Fix

Impacts

Researchers

Leo

Zhenpeng Lin

Vendors

Affected products

Weakness enumeration

CWE-843: Access of Resource Using Incompatible Type (\'Type Confusion\')

Related identifiers