Type confusion in V8 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. The flaw stems from an incorrect type conversion (CWE‑843) that lets malformed data bypass type checks. An attacker can deliver a malicious page that triggers the type confusion, leading to arbitrary code execution with sandbox privileges, potentially escaping the sandbox or corrupting other processes. The vulnerability is rated as high severity by Chromium.

Google Chrome versions prior to 157.0.8103.38 are affected. Users running Chrome 157.0.8103.37 or earlier on any platform that includes V8 are at risk. The compromise applies to all users who can be enticed to open a malicious web page in the affected Chrome build.

The attack vector is most likely a malicious web page served over HTTP or HTTPS, where an attacker injects crafted HTML and JavaScript. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Despite the lack of exploitation metrics, the CVSS is high, and the presence of a sandbox escape capability increases risk. The vulnerability is actively acknowledged by Chromium with a public rewrite to v157.0.8103.38, so attackers may attempt exploitation until patched.