Description
Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-09-29
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Immediate Patch
AI Analysis

Impact

A type‑confusion flaw in Chrome’s IndexedDB component allows a malicious web page to manipulate internal data structures, leading to execution of arbitrary code while remaining inside the browser sandbox. This gives an attacker the ability to compromise the confidentiality and integrity of data on the user’s system within the sandbox.

Affected Systems

Google Chrome browsers of all operating systems, versions earlier than 154.0.8037.57. The issue applies to the stable channel releases that did not yet incorporate the patch announced in September 2026.

Risk and Exploitability

The vulnerability carries a CVSS score of 8.8, indicating high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a crafted HTML page served over the network; a victim must visit or otherwise interact with the page to trigger the flaw. Once triggered, the attacker can execute code confined to the browser sandbox.

Generated by OpenCVE AI on September 30, 2026 at 00:02 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Google Chrome to version 154.0.8037.57 or later, which contains the IndexedDB type‑confusion fix.
  • If an immediate update cannot be applied, isolate affected systems from untrusted web content or disable nullable indexed database calls via policy until a patch is available.
  • Continuously monitor official Chrome release notes and security advisories for related or new fixes, and ensure that all future updates are installed promptly.

Generated by OpenCVE AI on September 30, 2026 at 00:02 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6513-1 chromium security update
History

Thu, 08 Oct 2026 12:15:00 +0000

Type Values Removed Values Added
Title IndexedDB Type Confusion Enabling Remote Code Execution in Chrome chromium-browser: Type confusion in IndexedDB
References
Metrics threat_severity

None

 threat_severity

Important

Thu, 01 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Wed, 30 Sep 2026 00:30:00 +0000

Type Values Removed Values Added
Title IndexedDB Type Confusion Enabling Remote Code Execution in Chrome

Tue, 29 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 29 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 29 Sep 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Tue, 29 Sep 2026 17:45:00 +0000

Type Values Removed Values Added
Description Type confusion in IndexedDB in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-843
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-09-30T03:56:49.575Z

Reserved: 2026-09-22T05:10:53.161Z

Link: CVE-2026-95365

cve-icon Vulnrichment

Updated: 2026-09-29T18:52:16.704Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-29T18:17:30.250

Modified: 2026-10-01T13:56:59.420

Link: CVE-2026-95365

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-29T17:31:42Z

Links: CVE-2026-95365 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-30T00:15:16Z

Weaknesses
  • CWE-843

    Access of Resource Using Incompatible Type ('Type Confusion')