Type Confusion in V8 Engine Affecting Google Chrome by Google
CVE-2026-103625

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 2 October 2026

What is CVE-2026-103625?

A type confusion vulnerability in the V8 JavaScript engine within Google Chrome allows remote attackers to execute arbitrary code. This occurs when a specially crafted HTML page is processed, leading to code being executed inside the browser's sandbox environment. Users are advised to update to the latest version to mitigate this risk.

Affected Version(s)

Chrome 154.0.8037.97

References

https://chromereleases.googleblog.com/2026/10/stable-chan...

https://issues.chromium.org/issues/559893859

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 2, 2026
Vulnerability Reserved
Sep 30, 2026

CVE-2026-103625 Data

JSON