CVE-2026-1862CWE-843

Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page

High · published February 3, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

⚡ A crafted HTML page is all it takes to unleash chaos! This type confusion vulnerability in Chrome's V8 engine could allow remote attackers to exploit heap corruption in versions prior to 144.0.7559.132. 🔥 Think of this as a mischievous chef swapping ingredients in a recipe; if the wrong element gets mixed in—like a dangerous spice—dinner could turn disastrous! Here, the V8 engine mishandles data types, leading to a feast of potential exploitation. If exploited, an attacker could compromise the entire browser session, leading to unauthorized data access or even allowing malware to run on your machine. That’s essentially inviting a cyber intruder into your digital home, with the potential for absolute havoc!

Put simply

Think of this as a mischievous chef swapping ingredients in a recipe; if the wrong element gets mixed in—like a dangerous spice—dinner could turn disastrous! Here, the V8 engine mishandles data types, leading to a feast of potential exploitation. This vulnerability arises from type confusion in the V8 JavaScript engine, which can cause memory corruption when processing certain crafted HTML. This flaw can allow malicious actors to execute arbitrary code on affected systems.

What to do

If exploited, an attacker could compromise the entire browser session, leading to unauthorized data access or even allowing malware to run on your machine. That’s essentially inviting a cyber intruder into your digital home, with the potential for absolute havoc! Update Google Chrome to version 144.0.7559.132 or later immediately to patch this vulnerability. Regularly review and maintain your browser for security updates to stay protected against such issues. 🛡️ You're on the front lines of your digital security, and with these steps, you’ll keep the bad guys at bay! You've got this! 💪✨

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00643 · 50.2th percentile
Weakness
CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2026-02-03T20:56Z
EPSS history
Timeline
  • 03 FEB 20:56Z
    Type Confusion in V8 in Google Chrome prior to 144.0.7559.132 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page
    cvelistv5