CVE Catalog
CVE-2026-13967
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.40%
32th percentile — higher than 32% of all known CVEs
Summary
A heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Risk Assessment
An attacker can gain remote control over the victim's browser, bypassing sandbox isolation, potentially leading to data theft or further system compromise.
Recommendation
Immediately update Google Chrome to version 150.0.7871.47 or later. Users should also enable automatic browser updates.
Original NVD description (English source)
Heap buffer overflow in V8 in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)