AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-76035

Google Chrome: remote code execution

Google

CVE-2026-76035 · Published Aug 18, 2026 · updated Aug 24, 2026

Critical9.6
Fix: upgrade to 151.0.7922.169 or later
Google advisory

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 151.0.7922.169, < 151.0.7922.169151.0.7922.169
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-20

More Google advisories

All Google
High 8.8Aug 18Google Chrome: use after freeCVE-2026-76040fixed in 151.0.7922.169Medium 4.3Aug 18Google Chrome: information disclosureCVE-2026-76041fixed in 151.0.7922.169Low 3.1Aug 18Google Chrome: uninitialized resourceCVE-2026-76042fixed in 151.0.7922.169High 8.8Aug 18Google Chrome: remote code executionCVE-2026-76043fixed in 151.0.7922.169High 8.3Aug 18Google Chrome: race conditionCVE-2026-76044fixed in 151.0.7922.169High 8.8Aug 18Google Chrome: use after freeCVE-2026-76045fixed in 151.0.7922.169