CVE-2026-76047
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
An attacker could exploit this vulnerability to execute malicious code within the browser context, potentially leading to session hijacking, data theft, or further privilege escalation.
Recommendation
Update Google Chrome to version 151.0.7922.169 or later, which includes the fix. Users should also enable automatic browser updates.
Original NVD description (English source)
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

