EUVD-2026-70706
GHSA-2fpf-v3fq-57pc
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Network-delivered via crafted page (AV:N), race condition requires timing (AC:H), no auth needed (PR:N), user must load page (UI:R), in-sandbox only so no scope change (S:U), full renderer process compromise (C:H/I:H/A:H).
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
Lifecycle Timeline
3DescriptionCVE.org
Race condition in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
In-sandbox arbitrary code execution in Google Chrome's V8 JavaScript engine (all versions prior to 152.0.7977.82) is achievable by a remote unauthenticated attacker who tricks a user into visiting a specially crafted HTML page. The underlying flaw is a CWE-367 Time-of-Check Time-of-Use (TOCTOU) race condition within V8, allowing the attacker to win a memory-access race and redirect execution flow inside the Chrome renderer sandbox. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The user must actively navigate to or load a page under the attacker's control containing the crafted HTML/JavaScript payload - passive drive-by without any user gesture is not possible given UI:R in the CVSS vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 7.5 base score reflects the realistic difficulty of winning a race condition (AC:H) combined with the requirement for user interaction (UI:R), which meaningfully lowers the practical exploitability compared to simpler memory corruption primitives. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Google Chrome to version 152.0.7977.82 or later immediately via the browser's built-in update mechanism (Settings → Help → About Google Chrome) or via organizational software deployment tooling. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, notify all users of the vulnerability and establish a Chrome update deployment schedule. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Vendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today