CVE Catalog

CVE-2026-76045

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.33%

26th percentile - higher than 26% of all known CVEs

Summary

Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code in the browser, potentially leading to data theft, session hijacking, or further system attacks.

Recommendation

Update Google Chrome to version 151.0.7922.169 or later. It is also recommended to enable automatic updates.

Original NVD description (English source)

Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS