CVE-2026-15903

HIGH8.8Published on July 20, 2026

Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-125, CWE-787, CWE-125, CWE-787

Vendorsgoogle

Affected products

Vendors	Prodotto	Versioni
google	chrome	< 150.0.7871.128

OpenAI presenta GPT‑5.6‑Cyber: più capacità offensive, accesso limitato ai partner

OpenAI Introduces GPT‑5.6‑Cyber: Greater Offensive Capabilities, Limited Partner Access

GPT-5.6-Cyber by OpenAI offers advanced offensive cybersecurity capabilities, limited to trusted partners. Excels in exploit tasks with 95% completion rate.

Aug 11, 20263 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

OpenAI Introduces GPT‑5.6‑Cyber: Greater Offensive Capabilities, Limited Partner Access