CVE Catalog
CVE-2026-76038
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.39%
33th percentile - higher than 33% of all known CVEs
Summary
Type confusion in V8 in Google Chrome prior to 151.0.7922.169. A remote attacker can exploit a crafted HTML page to execute arbitrary code inside the sandbox.
Risk Assessment
An attacker could gain control of the browser process within the sandbox, potentially leading to data theft or further privilege escalation.
Recommendation
Update Google Chrome to version 151.0.7922.169 or later to mitigate the vulnerability.
Original NVD description (English source)
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)