CVE-2026-78985
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Risk Assessment
An attacker could execute arbitrary code outside the browser sandbox, potentially leading to full system compromise and data breach.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to mitigate this vulnerability.
Original NVD description (English source)
Incorrect reference resolution in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)