GoogleCVE-2026-78915

Google Chrome: race condition

High7.5CVE-2026-78915 · Published Aug 25, 2026 · updated Aug 27, 2026

Race condition in Enterprise in Google Chrome on on Windows prior to 152.0.7977.65 allowed an adjacent attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)

Google advisory

Affected versions

Package	Affected	Fixed in
Chrome Product	>= 152.0.7977.65, < 152.0.7977.65	152.0.7977.65

Details and references

CVSS 3.1: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from: CISA (its enrichment of the CVE record)
Weakness: CWE-362

More Google advisories

All Google

Date	Advisory	Severity	Fixed in
Aug 25	Improper control of a resource through its lifetime in Workers in Google Chrome... Low3.1Aug 25 CVE-2026-79289152.0.7977.65	Low3.1	152.0.7977.65
Aug 25	Google Chrome: use after free Critical9.6Aug 25 CVE-2026-79290152.0.7977.65	Critical9.6	152.0.7977.65
Aug 25	Google Chrome: information disclosure Medium6.5Aug 25 CVE-2026-79291152.0.7977.65	Medium6.5	152.0.7977.65
Aug 25	Google Chrome: integer overflow High8.3Aug 25 CVE-2026-79292152.0.7977.65	High8.3	152.0.7977.65
Aug 25	Google Chrome: information disclosure Medium6.5Aug 25 CVE-2026-79293152.0.7977.65	Medium6.5	152.0.7977.65
Aug 25	Google Chrome: use after free Critical9.6Aug 25 CVE-2026-79275152.0.7977.65	Critical9.6	152.0.7977.65

Affected versions

More Google advisories

Critical advisories by email