CVE-2026-79218
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)
Risk Assessment
An attacker could execute arbitrary code outside the sandbox, potentially leading to full system compromise or security breach.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later.
Other vulnerabilities in Sandbox
See all- CVE-2017-13838High
An issue was discovered in certain Apple products, including macOS before 10.13.1, related to the 'Sandbox' component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
- CVE-2017-2512High
An issue was discovered in certain Apple products, including macOS before 10.12.5, related to the 'Sandbox' component. It allows attackers to conduct sandbox-escape attacks or cause a denial of service (memory corruption) via a crafted app.
Original NVD description (English source)
Incorrect authorization in Sandbox in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)