CVE-2026-10989
Heap Corruption in Google Chrome V8
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: Chrome
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| chrome | to 149.0.7827.53 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an inappropriate implementation in the V8 engine used by Google Chrome versions prior to 149.0.7827.53. It allows a remote attacker to potentially exploit heap corruption by convincing a user to perform specific user interface gestures while visiting a specially crafted HTML page.
How can this vulnerability impact me? :
The vulnerability can lead to heap corruption, which may allow an attacker to execute arbitrary code or cause a crash in the browser. This could compromise the security and stability of your system if you visit a malicious website and perform the required UI gestures.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, update Google Chrome to version 149.0.7827.53 or later, as the issue is fixed in that release.