CVE-2026-76020

Опубликовано: 20 авг. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Ссылки

https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0404570826.html
Release Notes
Vendor Advisory
https://issues.chromium.org/issues/541837151
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 151.0.7922.173 (исключая)

EPSS

Процентиль: 23%

0.00301

Низкий

7.5 High

CVSS3

Дефекты

CWE-367

Связанные уязвимости

CVE-2026-76020

CVSS3: 7.5

ubuntu

28 дней назад

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76020

CVSS3: 8.8

redhat

28 дней назад

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVE-2026-76020

CVSS3: 7.5

debian

28 дней назад

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed ...

GHSA-pgq9-pv57-hvch

CVSS3: 7.5

github

28 дней назад

Race condition in V8 in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

openSUSE-SU-2026:21624-1

suse-cvrf

26 дней назад

Security update for chromium

EPSS

Процентиль: 23%

0.00301

Низкий

7.5 High

CVSS3

Дефекты

CWE-367