V8 vulnerabilities

2 known vulnerabilities in V8 from Google. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Google Chromium V8 Type Confusion Exploited

  CVE-2026-85046Sep 3, 2026GoogleEPSS 1.81%

  Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

• 8.8 High severity

  Chrome: Access of Resource Using Incompatible Type

  CVE-2024-1939Feb 29, 2024GoogleEPSS 2.35%

  Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)