CVE-2026-10936

chromium-browser: Type Confusion in V8

View on CVE.org
Published Jun 4, 2026 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Analysis

AI-generated

Technical impact

A type confusion vulnerability in V8 can let an attacker execute arbitrary code inside the Chrome renderer sandbox by loading a specially crafted HTML page. The flaw is a mismatch between expected and actual JavaScript types, allowing control over memory to create malformed objects that are later used in privileged code paths. This weakness corresponds to CWE-843.

Affected Systems

Google Chrome versions earlier than 149.0.7827.53 are affected.

Risk and Exploitability

The vulnerability has a CVSS score of 8.8, indicating high severity, and is exploitable from a remote web page, allowing code execution within the sandbox. No EPSS value is available, and it is not listed in CISA’s KEV catalog. The attack vector is likely a crafted URL or embedded script that a user opens or visits in Chrome.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to Chrome version 149.0.7827.53 or later.
  • If an update is not immediately available, disable JavaScript in Chrome settings to reduce the attack surface.
  • Continuously monitor Chrome update channels for further patches and apply them as soon as they become available.

Generated by OpenCVE AI on June 5, 2026 at 04:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-6325-1 chromium security update
History
Type Values Removed Values Added
Title Type Confusion in V8 Enabling Remote Code Execution via Crafted HTML chromium-browser: Type Confusion in V8
References
Metrics threat_severity

None

 threat_severity

Important
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome
Type Values Removed Values Added
Title Type Confusion in V8 Enabling Remote Code Execution via Crafted HTML
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Type Confusion in V8 in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-843
References
Earlier changes (1)
Weaknesses
  • CWE-843

    Access of Resource Using Incompatible Type ('Type Confusion')

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Jun 5, 2026, 12:42 AM
Reserved
Jun 4, 2026, 5:06 PM

View source JSON

Updated
Jun 5, 2026, 12:40 AM

JSON

Status
Analyzed
Published
Jun 4, 2026, 11:16 PM
Modified
Jul 22, 2026, 8:10 PM

View source JSON

Severity
Important
Public date
Jun 2, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Jun 5, 2026, 4:45 AM

JSON