CVEvulnerability
CVE-2026-78915
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2026-08-25
- Last modified
- 2026-08-27
- Assigner
- [email protected]
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 7.5 HIGH — CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-362
Description
Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)
Affected configurations
• google chrome (< 152.0.7977.65)
Related
Weakness · CWE (1)
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness
References
- https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html Release Notes, Vendor Advisory
- https://issues.chromium.org/issues/533418127 Permissions Required