What is the CVSS score of EUVD-2026-79958?

EUVD-2026-79958 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Which versions of Google are affected by EUVD-2026-79958?

A critical memory-safety flaw in Google Chrome's V8 JavaScript engine (CVE-2026-91728, CVSS 9.6) allows a crafted web page to run attacker-controlled code on any affected endpoint, affecting every…. A patch is available.

How to fix or mitigate EUVD-2026-79958?

Within 24 hours, verify the current Chrome version across the fleet and begin emergency deployment of Google Chrome 153.0.8010.47 (or later), prioritizing executives, IT administrators, remote and high-risk browsing populations; confirm that auto-update is enabled on managed devices and instruct users on unmanaged devices to restart Chrome to complete pending updates. Within 7 days, confirm patch coverage for all managed endpoints and browsers based on Chromium (Edge, Brave, Opera, and similar) once their corresponding fixed builds are published, remediate or isolate any hosts that cannot be updated, and review proxy, DNS, and secure web gateway logs for suspicious activity tied to Chrome user agents. Within 30 days, achieve 100 percent compliance reporting on the minimum Chrome version, integrate browser version checks into vulnerability management dashboards and asset inventory, and validate that endpoint detection controls are tuned to flag malicious script activity originating from browser processes.

Google EUVD-2026-79958

| CVE-2026-91728 CRITICAL

Integer Overflow or Wraparound (CWE-190)

2026-09-15 chrome-cve-admin@google.com

GHSA-8h6f-xpv2-w7h5

RCE Google Integer Overflow

9.6

CVSS 3.1 · Vendor: google

Severity by source

Vendor (google) PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Primary rating from Vendor (google) · only source for this CVE.

CVSS VectorVendor: google

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Sep 16, 2026 - 00:23 vuln.today

CVSS changed

Sep 16, 2026 - 00:22 NVD

9.6 (CRITICAL)

CVE Published

Sep 15, 2026 - 21:16 cve.org

UNKNOWN (no severity yet)

CVE Published

Sep 15, 2026 - 21:16 cve.org

CRITICAL 9.6

DescriptionCVE.org

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Analysis

Integer overflow in V8 in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Recommended ActionAI

Within 24 hours, verify the current Chrome version across the fleet and begin emergency deployment of Google Chrome 153.0.8010.47 (or later), prioritizing executives, IT administrators, remote and high-risk browsing populations; confirm that auto-update is enabled on managed devices and instruct users on unmanaged devices to restart Chrome to complete pending updates. …

Threat intelligence, references, and detailed analysis are available after sign-in.