CVE Catalog
CVE-2026-78904
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.38%
31th percentile - higher than 31% of all known CVEs
Summary
A vulnerability in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The issue is related to type confusion in the ANGLE component, with a high severity level.
Risk Assessment
An attacker can execute code outside the sandbox, potentially leading to full compromise of the system and data.
Recommendation
It is recommended to update Google Chrome to version 152.0.7977.65 or later immediately.
Original NVD description (English source)
Type confusion in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)