CVE-2026-78915CWE-362

CVE-2026-78915

High · published August 26, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00143 · 3.3th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-08-26T01:17Z
Affected products (1)
ProductVersionsFixed in
google/chrome< 152.0.7977.65152.0.7977.65
References (2)
https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html · [email protected]https://issues.chromium.org/issues/533418127 · [email protected]
EPSS history
Timeline
  • 27 AUG 06:46Z
    EPSS moved — → 0%
    epss
  • 25 AUG 20:10Z
    Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside…
    cvelistv5