CVE Catalog
CVE-2026-79148
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
An off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. The issue has a low severity.
Risk Assessment
An attacker could read memory inside the sandbox, potentially leading to leakage of sensitive information.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to mitigate this vulnerability.
Original NVD description (English source)
Off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. (Chromium security severity: Low)