Outdated dependency on V8 found (see policy).

Please update to the latest beta, stable, or extended stable versions.

Chromium: CVE-2026-79097 Use after free in V8

Chromium: CVE-2026-79197 Use after free in V8

Chromium: CVE-2026-17836 Use after free in V8

CVE-2026-19151 Use after free in V8

CVE-2026-19150 Inappropriate implementation in V8

CVE-2026-19174 Integer overflow in V8

Google V8 before 5.2.361.32, as used in Google Chrome before 52.0.2743.82, does not properly process left-trimmed objects, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.

Chromium CVE-2026-87536: Use after free in V8

Chromium: CVE-2026-85046 Type confusion in V8

Chromium: CVE-2026-78899 Use after free in V8

Buffer overflow in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Chromium: CVE-2026-17658 Use after free in V8

Chromium: CVE-2026-17665 Use after free in V8

Chromium: CVE-2026-16418 Stack buffer overflow in V8

Chromium: CVE-2026-14406 Out of bounds read in V8

Chromium: CVE-2026-14415 Inappropriate implementation in V8

Chromium: CVE-2026-14393 Use after free in V8

Chromium: CVE-2026-14426 Use after free in V8

Multiple unspecified vulnerabilities in Google V8 before 3.23.17.18, as used in Google Chrome before 33.0.1750.149, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via JavaScript code that sets the value of an array element with a crafted index.

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) RuntimeTypedArrayInitialize and (2) RuntimeTypedArrayInitializeFromArrayLike functions.

The DehoistArrayIndex function in hydrogen-dehoist.cc (aka hydrogen.cc) in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allows remote attackers to cause a denial of service (out-of-bounds read) via JavaScript code that sets a variable to the value of an array element with a crafted index.

Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.

Google V8 before 3.17.13, as used in Google Chrome before 27.0.1444.3, allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by the Bejeweled game.

Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression.