CVE-2026-76037

HighCVSS 8.4

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

Link following in CredentialProvider in Google Chrome on Windows prior to 151.0.7922.169. A local attacker can exploit a local program to execute arbitrary code outside the sandbox.

Risk Assessment

A local attacker could gain access outside the sandbox, potentially leading to full system compromise.

Recommendation

Update Google Chrome on Windows to version 151.0.7922.169 or later to fix the vulnerability.

Original NVD description (English source)

Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)