EUVD-2026-65873
GHSA-mx4f-pjm3-x629
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Network delivery via crafted HTML page; AC:H for race condition timing and renderer-compromise prerequisite; UI:R required; confidentiality-only impact.
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Lifecycle Timeline
4DescriptionCVE.org
Race condition in WebProtect in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
WebProtect race condition in Google Chrome prior to 152.0.7977.65 exposes sensitive information to attackers who have already achieved renderer process compromise. The flaw (CWE-367 TOCTOU) enables a second-stage information disclosure step within a broader browser exploitation chain, requiring a victim to interact with a crafted HTML page. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two compounding conditions: first, the attacker must have already achieved compromise of the Chrome renderer process (a significant prerequisite typically requiring a separate, distinct browser vulnerability); second, the victim user must navigate to or be served a crafted HTML page. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is moderate-to-low despite the High confidentiality impact in CVSS. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker operating within an already-compromised Chrome renderer process - achieved via a separate vulnerability - serves or manipulates a crafted HTML page to trigger a race condition in the WebProtect subsystem, winning the timing window to read sensitive memory or data protected by WebProtect before the security check resolves. No public exploit code for this specific race condition has been identified, and the high attack complexity means reliable exploitation requires precise timing, making opportunistic mass exploitation unlikely. |
| Remediation | Update Google Chrome to version 152.0.7977.65 or later, as released in the stable channel update detailed at http://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today