CVE-2026-76033

MediumCVSS 4.2

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

29th percentile - higher than 29% of all known CVEs

Summary

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169. A remote attacker who compromised the renderer process can bypass site isolation via a crafted HTML page.

Risk Assessment

Bypassing site isolation could allow an attacker to access data from other sites, compromising confidentiality and integrity.

Recommendation

Update Google Chrome to version 151.0.7922.169 or later to fix the vulnerability.

Original NVD description (English source)

Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)