CVE-2026-15123 is a vulnerability in Google Chrome's DOM implementation affecting versions before 150.0.7871.115. The issue stems from insufficient data validation, which may lead to heap corruption when processing specially crafted HTML content. This vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. No known exploits in the wild have been reported at this time. The vendor advisory linked does not explicitly state the availability of a patch or remediation level, so patch status is not yet confirmed.

Successful exploitation could result in heap corruption, potentially allowing an attacker to execute arbitrary code or cause a denial of service. The CVSS vector indicates the attack can be performed remotely without privileges but requires user interaction. The impact affects confidentiality, integrity, and availability of the affected system.

Patch status is not yet confirmed—check the vendor advisory at https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_01162222768.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when visiting untrusted websites and avoid interacting with suspicious HTML content.