Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-76030: Chrome before 156.0.8078.79 may run code from fake page
CVE-2026-76030 · published 6 days ago
Summary
Versions of Google Chrome older than 156.0.8078.79 can be tricked by a specially crafted web page to run code on the computer, bypassing Chrome's normal security sandbox. This could let an attacker take actions on the system without permission. Update Chrome to the latest version to close the gap.
What to do
- Update google chrome to version 156.0.8078.79 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| chrome | < 156.0.8078.79 |
Original advisory text
Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a...
Incorrect authorization in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
References
- https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_... Release Notes Vendor Advisory
- https://issues.chromium.org/issues/572269631 Permissions Required
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.8
High
Type
CWE-119Buffer Overflow
CWE-863Incorrect Authorization
Timeline
Published30 Oct 2026
Updated4 Nov 2026
First seen30 Oct 2026
Track software like this
Free during beta