Google Chrome V8 Use-After-Free Vulnerability Allowing Heap Corruption via Malicious Extension

Vulnerability

A use-after-free vulnerability has been identified in the V8 JavaScript engine of Google Chrome, in versions prior to 147.0.7727.55. This vulnerability allows an attacker to exploit heap corruption by convincing a user to install a malicious Chrome extension.

Impact

Exploitation of this vulnerability could lead to heap corruption, potentially allowing for arbitrary code execution.

Remediation

Users can update to Google Chrome version 147.0.7727.55 or later to address this vulnerability.

Added: Apr 8, 2026, 11:27 PM
Updated: Apr 8, 2026, 11:27 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.2
remediation
7.7
relevance
5.4
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.