Advisory severityHigh8.3Red Hat Linux

High [CVE-2026-76047] Arbitrary code execution via type confusion in V8

This high-severity Red Hat Linux advisory covers CVE-2026-76047.

Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.

CVE-2026-76047 Source published Aug 18, 2026Source updated Aug 18, 2026

VulniPulse record published Aug 19, 2026Record updated Aug 20, 2026

CVE-2026-76047

Affected products & platforms

Red Hat LinuxUnclassified

Open source advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery

Get CVE alerts See app features

Summary

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) A flaw was found in chromium-browser.

A remote attacker could exploit a type confusion vulnerability in the V8 JavaScript engine by enticing a user to visit a specially crafted HTML page. This could allow the attacker to execute arbitrary code within the browser's sandbox, potentially compromising the user's system.

Exploitation requires user interaction, specifically visiting a specially crafted HTML page, but the potential for remote code execution elevates its severity. Red Hat severity: Important — CVSS 8.3 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).

Weakness: CWE-843.

Affected versions

< 151.0.7922.169

Official advisory · high-confidence parse· fetched 22 days ago·verify at source

Fixed versions

No fixed release is recorded yet. That does not prove no patch exists — confirm against the vendor advisory.

Official advisory · high-confidence parse· fetched 22 days ago·verify at source

Mitigation

The source record does not include mitigation steps. That is not a statement that no fix exists — read the vendor advisory below for the authoritative guidance.

Official advisory · high-confidence parse· fetched 22 days ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.