A type‑confusion flaw in the V8 JavaScript engine allows a remote attacker to run arbitrary code inside Chrome’s sandbox when a specially crafted HTML page is processed. The vulnerability is declared high severity in Chromium’s assessment and, if triggered, can execute code that is normally blocked by the browser’s sandbox, potentially granting the attacker full control over the compromised process.

All versions of Google Chrome that use the V8 engine and are older than 154.0.8037.97 are affected. The CVE explicitly lists this unsanitized version boundary; no other releases are mentioned as vulnerable.

Chromium assigns a CVSS score of 8.8, indicating a high severity risk. No EPSS score is available, and the bug is not listed in CISA’s KEV catalog. Exploitation requires a malicious HTML page viewed in the client machine, making the attack vector web‑based. Because code can be executed inside the sandbox, the threat level remains high for any user that visits untrusted content.