CVE-2026-6307

Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome, Red Os

Google Chrome

< 147.0.7727.101

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.4% (30th percentile)

Weakness

CWE-843

NVD status

Analyzed

Published

2026-04-15