CVE-2026-9973

Out of bounds write in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome, V8

Google Chrome

< 148.0.7778.216

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.3% (23th percentile)

Weakness

CWE-787

NVD status

Analyzed

Published

2026-05-28