EUVD-2026-50626
GHSA-96rv-m324-862p
Severity by source
Sources disagree (Medium–Critical)AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Local vector and the need for an existing foothold to reach the Chromoting host imply PR:L; total OS-level compromise yields C:H/I:H/A:H with unchanged scope.
vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.
CVSS VectorVendor: Chrome
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
8DescriptionCVE.org
Inappropriate implementation in Chromoting in Google Chrome on Linux prior to 151.0.7922.72 allowed a local attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)
AnalysisAI
Local OS-level privilege escalation in Google Chrome on Linux before 151.0.7922.72 stems from an inappropriate implementation in the Chromoting (Chrome Remote Desktop) component, letting a local attacker leverage malicious network traffic to gain elevated OS privileges. Rated CVSS 8.4 (Chromium severity Medium), the flaw carries total technical impact but no public exploit identified at time of analysis and a low EPSS of 0.11% (2nd percentile), indicating minimal current exploitation pressure. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the target Linux system to be running Chrome (prior to 151.0.7922.72) with the Chromoting / Chrome Remote Desktop host component active and reachable - this is the specific, non-default deployment condition that makes the flaw exploitable. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed and warrant careful triage. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with a foothold on a Linux workstation running Chrome Remote Desktop sends malicious network traffic to the Chromoting host process, which mishandles the input and performs a privileged operation on the attacker's behalf, elevating them from an unprivileged local user to OS-level privileges. Because the CVSS vector is AV:L/AC:L with no privileges or user interaction required, exploitation is low-complexity once the attacker can reach the host, though no public exploit code has been identified. |
| Remediation | Vendor-released patch: update Google Chrome on Linux to 151.0.7922.72 or later via the Stable channel update (https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html), then relaunch the browser and any Chrome Remote Desktop host to load the fix. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit Chrome deployments across Linux endpoints and notify affected users of the required update priority. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today