hypeorhack
← back

CVE-2026-76028

HIGH · 8.8
No AI summary yet — the auto-summarizer runs every 10 minutes for top trending CVEs.

Description

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS 3.1 breakdown

Exploitability 2.8 · Impact 5.9
vector CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges required
None
User interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Affected versions

  • google/chrome
    • < 156.0.8078.79

Weaknesses

Vendors

  • google

Products

  • chrome

References

Other · 1