AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-76033

Google Chrome: improper input validation

Google

CVE-2026-76033 · Published Aug 18, 2026 · updated Aug 20, 2026

Medium4.2
Fix: upgrade to 151.0.7922.169 or later
Google advisory

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 151.0.7922.169, < 151.0.7922.169151.0.7922.169
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-20

More Google advisories

All Google
High 8.8Aug 18Google Chrome: use after freeCVE-2026-76040fixed in 151.0.7922.169Medium 4.3Aug 18Google Chrome: information disclosureCVE-2026-76041fixed in 151.0.7922.169Low 3.1Aug 18Google Chrome: uninitialized resourceCVE-2026-76042fixed in 151.0.7922.169High 8.8Aug 18Google Chrome: remote code executionCVE-2026-76043fixed in 151.0.7922.169High 8.3Aug 18Google Chrome: race conditionCVE-2026-76044fixed in 151.0.7922.169High 8.8Aug 18Google Chrome: use after freeCVE-2026-76045fixed in 151.0.7922.169