What is the CVSS score of EUVD-2026-65763?

EUVD-2026-65763 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of Google Chrome are affected by EUVD-2026-65763?

Google Chrome for macOS users face a memory corruption vulnerability that enables attackers to escape the browser sandbox and execute arbitrary code when visiting crafted webpages, affecting all…. A patch is available.

How to fix or mitigate EUVD-2026-65763?

Within 24 hours, identify all macOS systems running Google Chrome and send urgent patch communications to users, clearly stating that versions prior to 152.0.7977.65 contain a sandbox-escape vulnerability requiring immediate action. Within 7 days, deploy Chrome 152.0.7977.65 or later across all macOS endpoints through your MDM platform or patch management system, prioritizing administrative and executive systems. Within 30 days, conduct a compliance audit confirming 100% of Mac-based Chrome installations are at version 152.0.7977.65 or later, and establish automatic update policies to prevent future version drift.

Google Chrome EUVD-2026-65763

| CVE-2026-79069 HIGH

Buffer Overflow (CWE-119)

2026-08-25 Chrome

GHSA-pr6f-vr87-8x7h

Google Buffer Overflow RCE

8.8

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

9.6 CRITICAL

Description explicitly states execution outside the Chrome sandbox, indicating scope change (S:C); all other metrics align with network-delivered, user-triggered, unauthenticated exploitation.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (Chrome).

CVSS VectorVendor: Chrome

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 26, 2026 - 17:26 vuln.today

CVSS changed

Aug 26, 2026 - 17:23 NVD

8.8 (HIGH)

CVE Published

Aug 25, 2026 - 20:09 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 25, 2026 - 20:09 cve.org

HIGH 8.8

DescriptionCVE.org

Memory corruption in Tint in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Memory corruption in Chrome's Tint graphics library on macOS allows remote attackers to potentially execute arbitrary code outside the browser sandbox by luring a user to a crafted HTML page. All Google Chrome versions prior to 152.0.7977.65 on Mac are affected. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Attacker hosts crafted HTML page

Delivery

macOS Chrome user visits malicious page via phishing or malvertising

Exploit

Browser parses page and invokes Tint for graphics/shader processing

Execution

Memory corruption triggered in Tint component

Persist

Renderer sandbox bypassed, arbitrary code executes at OS user level

Impact

Attacker achieves full user-context OS access

Access

Attacker hosts crafted HTML page

Delivery

macOS Chrome user visits malicious page via phishing or malvertising

Exploit

Browser parses page and invokes Tint for graphics/shader processing

Execution

Memory corruption triggered in Tint component

Persist

Renderer sandbox bypassed, arbitrary code executes at OS user level

Impact

Attacker achieves full user-context OS access

Vulnerability AssessmentAI

Exploitation	Exploitation is limited to Google Chrome on macOS - other platforms (Windows, Linux, Android, iOS) and other Chromium-based browsers are not confirmed affected by this specific issue. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 8.8 vector (AV:N/AC:L/PR:N/UI:R) reflects straightforward network-reachable exploitation requiring only that the victim visit a malicious page - no authentication and low attack complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker hosts a webpage containing crafted HTML and WebGPU shader content designed to trigger memory corruption in Chrome's Tint library during page rendering. When a macOS user visits the page - through a phishing link, malvertising, or a compromised site - the Tint component processes the malicious content, corruption occurs in memory, and the attacker achieves arbitrary code execution that breaks out of Chrome's renderer sandbox and runs at the OS user's privilege level. …
Remediation	Vendor-released patch: Chrome 152.0.7977.65. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all macOS systems running Google Chrome and send urgent patch communications to users, clearly stating that versions prior to 152.0.7977.65 contain a sandbox-escape vulnerability requiring immediate action. …

Threat intelligence, references, and detailed analysis are available after sign-in.