CVE-2026-79236

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65

Description A type confusion issue exists in V8, the open-source JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the victim to visit a specially crafted HTML page. Real-world exploitation has been demonstrated using a chain of bugs to achieve a V8 sandbox escape and gain program counter control on arm64 architectures.

Recommendations Update Google Chrome to version 152.0.7977.65 or later.