CVE-2026-76047: Google Chrome vulnerability

Q: Which Chrome installations are exposed?

Users of Google Chrome versions earlier than 151.0.7922.169 are affected when they load an attacker-crafted HTML page. The issue enables arbitrary code execution inside Chrome's sandbox.

Q: What does an attacker need to exploit this issue?

An attacker needs to cause the target to load a crafted HTML page. The provided information does not indicate that authentication, local access, or additional user interaction is required beyond visiting or rendering that page.

Q: What should teams do to remediate the vulnerability?

Update Google Chrome to version 151.0.7922.169 or later. No alternative mitigation is provided in the available information.

Published Aug 18, 2026

Updated

Type confusion in V8 in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<151.0.7922.169

Event History

Aug 18, 2026

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations are exposed?

Users of Google Chrome versions earlier than 151.0.7922.169 are affected when they load an attacker-crafted HTML page. The issue enables arbitrary code execution inside Chrome's sandbox.

What does an attacker need to exploit this issue?

An attacker needs to cause the target to load a crafted HTML page. The provided information does not indicate that authentication, local access, or additional user interaction is required beyond visiting or rendering that page.

What should teams do to remediate the vulnerability?

Update Google Chrome to version 151.0.7922.169 or later. No alternative mitigation is provided in the available information.