CVE Catalog

CVE-2026-79130

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.28%

20th percentile - higher than 20% of all known CVEs

Summary

Buffer overflow in ANGLE in Google Chrome before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.

Risk Assessment

High risk of arbitrary code execution outside the sandbox, potentially leading to full system compromise.

Recommendation

Update Google Chrome to version 152.0.7977.65 or later to fix the buffer overflow.

Original NVD description (English source)

Buffer overflow in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS