CVE-2026-82072: Out of bounds read in Google Chrome

This vulnerability involves an out-of-bounds read in the V8 engine component of Google Chrome before version 151.0.7922.72. Exploitation requires a user to visit a maliciously crafted HTML page, which can trigger arbitrary code execution inside the sandboxed environment of the browser. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary code execution within the sandbox of the affected Chrome browser, potentially compromising confidentiality, integrity, and availability of the user's environment within the browser context. However, the attack requires user interaction (visiting a malicious page). There are no known exploits in the wild at this time.

Users should update Google Chrome to version 151.0.7922.72 or later to remediate this vulnerability. Since this is an out-of-bounds read in V8 fixed in that version, applying the official update is the recommended and effective mitigation.