Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the… (CVE-2026-79045)

CVE-2026-79045 is a type confusion vulnerability in the V8 engine of Google Chrome before version 152.0.7977.65. Exploitation requires user interaction via social engineering to visit a maliciously crafted HTML page, which can lead to unauthorized reading of memory within the sandbox environment. The vulnerability is classified under CWE-843 and has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability.

Successful exploitation can result in an attacker reading sensitive memory contents inside the sandbox, potentially exposing confidential information. The vulnerability affects confidentiality, integrity, and availability with high severity. However, exploitation requires user interaction and social engineering, and there are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users and administrators should monitor official Google Chrome security advisories for updates and apply the official fix once available. Until then, exercising caution with untrusted web content and avoiding suspicious links is advised.