CVE-2026-7936

chromium-browser: Object lifecycle issue in V8

View on CVE.org
Published May 6, 2026 CVSS 3.1 · 4.3 Medium EPSS n/a KEV · Not listed
Description
Determined not a vulnerability

Analysis

Determined not a vulnerability

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-6250-1 chromium security update
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description Object lifecycle issue in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium) Determined not a vulnerability
Type Values Removed Values Added
Title Chrome V8 Out-of-Bounds Memory Read via Malicious HTML Page chromium-browser: Object lifecycle issue in V8
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Moderate
Type Values Removed Values Added
Title Chrome V8 Out-of-Bounds Memory Read via Malicious HTML Page
Type Values Removed Values Added
Title Out‑of‑Bounds Memory Read in V8 via Crafted HTML
Weaknesses CWE-119
Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome
Type Values Removed Values Added
Weaknesses CWE-125
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N'}
Type Values Removed Values Added
Title Out‑of‑Bounds Memory Read in V8 via Crafted HTML
Weaknesses CWE-119
Type Values Removed Values Added
Description Object lifecycle issue in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
References
Earlier changes (6)
Weaknesses
  • CWE-825

    Expired Pointer Dereference

Sources

Status
REJECTED
Assigner
Chrome
Published
Updated
Jun 16, 2026, 9:18 PM
Reserved
May 5, 2026, 10:59 PM

View source JSON

Updated

JSON

Status
Rejected
Published
May 6, 2026, 7:16 PM
Modified
Jun 17, 2026, 1:21 PM

View source JSON

Severity
Moderate
Public date
May 5, 2026, 12:00 AM

View source Bugzilla JSON

No data.