Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-79131: Chrome and Chromium could run malicious code from web page
CVE-2026-79131 · published 2 months ago
Summary
Versions of Google Chrome and the Chromium browser before 152.0.7977.65 contain a bug that lets a specially crafted web page write data beyond intended memory limits. This can allow an attacker to break out of the browser's safety sandbox and run code on the user's computer. Update the browser to the latest version as soon as possible to close this risk.
What to do
- Update google chrome to version 152.0.7977.65 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | chrome | < 152.0.7977.65 | |
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium | All versions |
| Debian:13 | debian | chromium | All versions |
| Debian:14 | debian | chromium | All versions |
Original advisory text
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Out of bounds write in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-787Out-of-bounds Write
Timeline
Published25 Aug 2026
Updated4 Nov 2026
First seen26 Aug 2026
Track software like this
Free during beta