CVE-2026-76044
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
If an attacker compromises the renderer process, they could exploit this vulnerability to execute code outside the sandbox, potentially leading to full system compromise or access to sensitive data.
Recommendation
Update Google Chrome to version 151.0.7922.169 or later. Users should also be cautious when opening unknown pages.
Original NVD description (English source)
Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)