Skip to main content
CVE-2026-126916VulnerabilityPublished

V8 · Integer Overflow

Source GCVE Database

0
Compare
Authoritative record:CVE-2026-126916· High

Not known to be exploited : upgrade to 157.0.8103.78 soon.

Data as of 12 Nov 2026, 01:48 UTC

Severity
High

Rated High by Threat Radar's AI analysis · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in 157.0.8103.78

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 11 Nov 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 11 Nov 2026.

What to do

Upgrade Chrome to 157.0.8103.78.

Affected software

ProductAffectedFixed in
GoogleChromeAffected
  • >=157.0.8103.78 <157.0.8103.78
Fixed in
  • 157.0.8103.78

AI-suggested

A fixed version of Google Chrome addressing this vulnerability is available starting from version 157.0.8103.78. Users and administrators should update to this version or later to remediate the issue. No additional mitigation guidance is provided, and no known exploits are reported in the wild.

Description

An integer overflow vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by delivering a specially crafted HTML page. The Chromium project has assigned this vulnerability a high security severity rating.

References

Community reviews

Loading reviews…