CVE-2026-15776
High · 8.8CVSS
8.8
EPSS
0.5%
Published
Jul 14, 2026
CISA due date
—
The record
Inappropriate implementation in V8 in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119086 Missing queue-set type validation in the queue-set selection system call in… CWE-843
- CVE-2026-96187 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-88090 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration… CWE-843
- CVE-2026-62765 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-85898 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-114598 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length… CWE-843
- CVE-2026-112659 A type confusion issue was addressed with improved memory handling. CWE-843