What is the CVSS score of EUVD-2026-44483?

EUVD-2026-44483 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Google are affected by EUVD-2026-44483?

A type-confusion vulnerability in Google Chrome's V8 JavaScript engine (versions prior to 150.0.7871.125) enables remote code execution when employees visit attacker-controlled websites, creating a…. A patch is available.

How to fix or mitigate EUVD-2026-44483?

Within 24 hours, identify the scope of Chrome deployments across managed and unmanaged endpoints and prioritize systems with internet access. Within 7 days, deploy Chrome 150.0.7871.125 or later to 100% of endpoints using automatic update mechanisms or mobile device management platform enforcement. Within 30 days, verify update compliance through endpoint telemetry and confirm that all Chrome instances have reached version 150.0.7871.125 or later.

Google EUVD-2026-44483

| CVE-2026-15776 HIGH

Access of Resource Using Incompatible Type (Type Confusion) (CWE-843)

2026-07-14 Chrome

GHSA-6gfg-hh9c-wx87

RCE Google Memory Corruption Red Hat Suse

8.8

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SUSE

CRITICAL

qualitative

Red Hat

8.8 HIGH

qualitative

Primary rating from Vendor (Chrome).

CVSS VectorVendor: Chrome

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 22, 2026 - 13:01 vuln.today

Patch available

Jul 14, 2026 - 23:20 EUVD

CVSS changed

Jul 14, 2026 - 21:22 NVD

8.8 (HIGH)

CVE Published

Jul 14, 2026 - 20:09 cve.org

HIGH 8.8

DescriptionCVE.org

Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Remote code execution in Google Chrome's V8 JavaScript engine (versions prior to 150.0.7871.125) allows a remote attacker to run arbitrary code within the renderer sandbox when a victim visits a crafted HTML page. Rated High by Chromium and CVSS 8.8, the flaw is a type-confusion class issue in V8 requiring only that the user browse to attacker-controlled content. There is no public exploit identified at time of analysis and EPSS is low (0.34%), but Chrome's ubiquity and the total technical impact make patching urgent.