CVE Catalog
CVE-2026-78948
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.39%
31th percentile - higher than 31% of all known CVEs
Summary
Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)
Risk Assessment
The risk is critical as it allows remote code execution outside the sandbox, potentially leading to full system compromise.
Recommendation
Urgently update Google Chrome to version 152.0.7977.65 or later to prevent exploitation of this vulnerability.
Original NVD description (English source)
Buffer overflow in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)