CVE WatchOct 8, 2026

CVE-2023-3079

Google Chromium V8 Type Confusion Vulnerability

CVSS

8.8

High

EPSS

37.9%

p99

KEV

YES

Jun 7, 2023

Exploit Today

0-100

Published: Jun 5, 2023 · Last modified: Oct 8, 2026 · CWE-843

EPSS · 30d

32.1%EPSS · 30 days37.9%

2026-09-182026-10-16

KEV catalog record

Product

Google / Chromium V8

Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Added to KEV

Jun 7, 2023

Remediate by

Jun 28, 2023

Known ransomware use

Summary description

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Required action

Apply updates per vendor instructions.

Notes

https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html; https://nvd.nist.gov/vuln/detail/CVE-2023-3079

Technical description

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-0314—

0.8%

——0A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.1d CVE-2026-1101408.8 HIG

24.5%

——7Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)2d CVE-2026-969215.5 MED

32.3%

——10Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.9h CVE-2026-968545.5 MED

21.8%

——7Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.13h CVE-2026-853777.8 HIG

23.2%

——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.10h CVE-2026-837637.8 HIG

27.7%

——8Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.13h