CVE-2026-917499.6CriticalCWE-416
Google Chrome vulnerability
Google · Chrome
Not in CISA KEVVendor fix available
0.4%probability of exploitation in the next 30 days
31st percentile
050100
Higher than 31% of scored CVEs
9.6CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Use after free in Workers in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Coverage2 articles · 2 outlets
One row per outlet, in order of first report. First in our coverage: SecurityOnline, 16 Sep.
Quiet for 6 weekslast report 16 Sep2 articles2 outlets
- Wed 16 Sep, 03:13 UTC. SecurityOnline, first report. Google Chrome 153 Fixes Critical WebGL Flaw Enabling Code Execution.
- Wed 16 Sep, 10:47 UTC. SecurityWeek, its first report on the story. Google and Mozilla Patch 115 Browser Flaws, Including Critical Bugs.
- First report
- Article
- Running total
Show as tableHide table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| 16 Sep 03:13 | SecurityOnline | Google Chrome 153 Fixes Critical WebGL Flaw Enabling Code Execution |
| 16 Sep 10:47 | SecurityWeek | Google and Mozilla Patch 115 Browser Flaws, Including Critical Bugs |
- Google and Mozilla Patch 115 Browser Flaws, Including Critical BugsSecurityWeek · mentions it in passing
- Google Chrome 153 Fixes Critical WebGL Flaw Enabling Code ExecutionSecurityOnline · first in our coverage
New articles also arrive in the RSS feed.