CVE Watch8 oct 2026

CVE-2023-3079

Google Chromium V8 Type Confusion Vulnerability

CVSS

8.8

Alto

EPSS

37.9%

p99

KEV

SÍ

7 jun 2023

Exploit Today

0-100

Publicado: 5 jun 2023 · Última mod.: 8 oct 2026 · CWE-843

EPSS · 30d

32.1%EPSS · 30 días37.9%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Google / Chromium V8

Vulnerabilidad

Google Chromium V8 Type Confusion Vulnerability

Añadido a KEV

7 jun 2023

Remediar antes de

28 jun 2023

Uso conocido en ransomware

Descripción resumida

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Acción requerida

Apply updates per vendor instructions.

Notas

https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html; https://nvd.nist.gov/vuln/detail/CVE-2023-3079

Descripción técnica

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-0314—

—

——0A type confusion vulnerability in Palo Alto Networks GlobalProtect™ app on Windows enables a local user with low privileges to cause a denial of service (DoS) condition. The GlobalProtect™ app on Linux, macOS, iOS, Android, and Chrome OS is not affected by this vulnerability.4h CVE-2026-1101408.8 ALT

13.3%

——4Type confusion in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)19h CVE-2026-969215.5 MED

32.1%

——10Access of resource using incompatible type ('type confusion') in Windows Message Queuing Queue Manager allows an authorized attacker to disclose information locally.2d CVE-2026-968545.5 MED

21.7%

——7Access of resource using incompatible type ('type confusion') in Windows Device Association Service allows an authorized attacker to disclose information locally.2d CVE-2026-853777.8 ALT

23.1%

——7Access of resource using incompatible type ('type confusion') in Windows CD-ROM Driver allows an authorized attacker to elevate privileges locally.2d CVE-2026-837637.8 ALT

27.6%

——8Access of resource using incompatible type ('type confusion') in Windows Input System allows an authorized attacker to elevate privileges locally.2d