EUVD-2026-61235
GHSA-fwjc-8rx5-jv4m
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-delivered via web page (AV:N), no complexity beyond crafted HTML (AC:L), no authentication (PR:N), requires victim to visit page (UI:R), sandbox-contained with no scope change (S:U), full impact within renderer (C:H/I:H/A:H).
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
Type confusion in V8, Chrome's JavaScript engine, enables remote code execution within the browser sandbox against users running Chrome prior to 151.0.7922.169. An unauthenticated remote attacker can trigger the vulnerability by luring a victim to a crafted HTML page, making this a drive-by exploitation scenario requiring only a single user interaction. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Victim must actively visit or be redirected to a crafted HTML page using an unpatched Chrome browser - this is the sole required condition (UI:R). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 base score reflects network-reachable exploitation with no authentication requirement, low complexity, and full confidentiality, integrity, and availability impact - offset only by the requirement for user interaction (UI:R) and sandbox containment (S:U, no scope change). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a malicious HTML page containing crafted JavaScript designed to trigger a type confusion condition in V8's object handling. When a victim browses to the page - via a phishing link, malvertising, or a compromised legitimate site - Chrome's V8 engine processes the script and the type confusion causes controlled memory corruption, leading to arbitrary code execution within the Chrome renderer sandbox. … |
| Remediation | Update Google Chrome to version 151.0.7922.169 or later via the built-in updater or the stable channel advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit your Chrome deployment infrastructure and confirm your ability to push updates to all affected endpoints. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Memory Corruption
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today