Google Chrome V8 Type Confusion Vulnerability Allowing Arbitrary Code Execution in Extensions

Vulnerability

A type confusion vulnerability has been identified in the V8 JavaScript engine of Google Chrome. This issue affects Chrome versions prior to 148.0.7778.216. The vulnerability allows an attacker to execute arbitrary code within a sandbox by convincing a user to install a malicious Chrome extension.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution within a sandboxed environment.

Remediation

Users can update to Google Chrome version 148.0.7778.216 or later to address this vulnerability.

Added: May 29, 2026, 12:51 AM
Updated: May 29, 2026, 12:51 AM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
3.6
remediation
7.7
relevance
9.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.