CVE-2026-126880

Google Chrome remote code execution in V8

high · 8.8

Fix listed

Google Chrome

Published Nov 11, 2026, 22:38 UTC

Description

Type confusion in V8 in Google Chrome prior to 157.0.8103.78 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Reported fixed versions

157.0.8103.78

Official CVE record View source and advisories

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.