CVE-2026-78989

CriticalCVSS 9.6

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.42%

35th percentile - higher than 35% of all known CVEs

Summary

Out of bounds read in ANGLE in Google Chrome on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)

Risk Assessment

Code execution outside the sandbox could lead to full system compromise, posing a serious security threat.

Recommendation

Update Google Chrome on Windows to the latest version to fix this vulnerability.

Original NVD description (English source)

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)