Threats tagged 'ghsa-xc4c-849c-886m'

A high-severity out-of-bounds write vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 151.0.7922.109. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a specially crafted HTML page. The vulnerability is identified as CWE-787 and carries a CVSS 3.1 score of 8.8, indicating a critical impact on confidentiality, integrity, and availability. No public exploits or known in-the-wild exploitation have been reported as of the publication date.