Tools AI-Found Vulnerability Register aifv-0089
Register entry
Chrome fixes V8 type confusion
- CVE
- CVE-2026-106240
- Project
- Google Chrome
- Component
- V8
- Finder
- OpenAI Codex Security
- Autonomy
- Product and human handle credited; contribution split unstated
- Evidence tier
- CNA credits the finder in its own advisory
- Assigner
- Chrome
- Severity
- High (Chrome vendor rating)
- Bounty
- Chrome Vulnerability Reward Program; amount unannounced
- Confidence
- CONFIRMED
What happened
Google’s 6 October Chrome release fixes type confusion in v8. The vendor rates it high and credits OpenAI Codex Security (amyb).
Credit as recorded: Reported by OpenAI Codex Security (amyb) on 2026-09-28. The report to Google was dated 2026-09-28. Fixed releases are 155.0.8059.39/.40 on Windows and Mac and 155.0.8059.39 on Linux. The credit identifies the Codex Security product without a specific underlying model version. Date basis: vendor release note.
Sources
- Chrome stable release, 6 Octoberchromereleases.googleblog.com/2026/10/stable-channel-update-…
One record from the AI-Found Vulnerability Register, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 8 October 2026