AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

GoogleCVE-2026-76037

Google Chrome: code execution

Google

CVE-2026-76037 · Published Aug 18, 2026 · updated Aug 20, 2026

High8.4
Fix: upgrade to 151.0.7922.169 or later
Google advisory

Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

Affected versions

PackageAffectedFixed in
Chrome
Product
>= 151.0.7922.169, < 151.0.7922.169151.0.7922.169
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
CISA (its enrichment of the CVE record)
Weakness
CWE-59

More Google advisories

All Google
High 8.8Aug 18Google Chrome: use after freeCVE-2026-76040fixed in 151.0.7922.169Medium 4.3Aug 18Google Chrome: information disclosureCVE-2026-76041fixed in 151.0.7922.169Low 3.1Aug 18Google Chrome: uninitialized resourceCVE-2026-76042fixed in 151.0.7922.169High 8.8Aug 18Google Chrome: remote code executionCVE-2026-76043fixed in 151.0.7922.169High 8.3Aug 18Google Chrome: race conditionCVE-2026-76044fixed in 151.0.7922.169High 8.8Aug 18Google Chrome: use after freeCVE-2026-76045fixed in 151.0.7922.169