CVE WatchOct 15, 2026

CVE-2026-110140

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr

CVSS

8.8

High

EPSS

0.2%

p13

KEV

—

Exploit Today

0-100

Published: Oct 13, 2026 · Last modified: Oct 15, 2026 · CWE-843

EPSS · 30d

Not enough EPSS history yet.

Technical description

Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-0314—

—

——0A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.11h CVE-2026-969215.5 MED

32.1%

——10Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.2d CVE-2026-968545.5 MED

21.7%

——7Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.2d CVE-2026-853777.8 HIG

23.1%

——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.1d CVE-2026-837637.8 HIG

27.6%

——8Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.1d CVE-2026-836645.5 MED

23.2%

——7Access of resource using incompatible type ('type confusion') in Windows Portable Device File System Driver allows an authorized attacker to disclose information locally.1d