CVE WatchAug 3, 2026

CVE-2026-17836

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf

CVSS

8.8

High

EPSS

0.4%

p32

KEV

—

Exploit Today

0-100

Published: Jul 30, 2026 · Last modified: Aug 3, 2026 · CWE-416

EPSS · 30d

0.3%EPSS · 30 days0.4%

2026-08-232026-09-20

Technical description

Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-940849.4 CRI

34.2%

——10Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.2d CVE-2026-940553.7 LOW

24.4%

——7Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free.2d CVE-2026-880978.1 HIG

12.7%

——4Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.2d CVE-2026-935862.9 LOW

1.7%

——1ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a use-after-free vulnerability in the ImagesToBlob method, caused by a pointer that is not updated correctly. Exploitation may result in a limited availability impact (e.g., a crash of the affected process). The issue is fixed in versions 7.1.2-31 and 6.9.13-56.3d CVE-2026-933828.8 HIG

31.2%

——9Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)3d CVE-2026-933749.6 CRI

29.2%

——9Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)3d