CVE-2026-76035

CriticalCVSS 9.6

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.36%

29th percentile - higher than 29% of all known CVEs

Summary

Inappropriate implementation in Media in Google Chrome on Mac prior to 151.0.7922.169. A remote attacker can exploit a crafted HTML page to execute arbitrary code outside the sandbox.

Risk Assessment

An attacker could execute code outside the sandbox, potentially leading to full control of the Mac system.

Recommendation

Update Google Chrome on Mac to version 151.0.7922.169 or later to fix the vulnerability.

Original NVD description (English source)

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)