cve-2026-6301

CVE-2026-6301 is a high-severity Chromium vulnerability involving a type confusion in the Turbofan JavaScript compiler. It affects Chrome versions prior to 147.0.7727.101 and allows a remote attacker to execute arbitrary code within the browser sandbox via a crafted HTML page. Because Microsoft Edge shares the same Chromium engine, the flaw is also tracked in Microsoft's Security Update Guide for downstream visibility. Discussions on WindowsForum focus on the enterprise security implications, the need for immediate patching, and the broader impact on Chromium-based browsers. Users share mitigation steps and patch status updates for both Chrome and Edge.