What is the CVSS score of EUVD-2026-65982?

EUVD-2026-65982 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Google Chrome are affected by EUVD-2026-65982?

Google Chrome on macOS versions prior to 152.0.7977.65 contains a remote code execution vulnerability in the ANGLE graphics engine that allows unauthenticated attackers to escape Chrome's sandbox and…. A patch is available.

How to fix or mitigate EUVD-2026-65982?

Within 24 hours, identify all macOS systems running Chrome in your environment and communicate the patch urgency to device owners and IT operations. Within 7 days, deploy Chrome version 152.0.7977.65 or later across all affected macOS endpoints-users can manually update via Chrome Settings > About Chrome > Check for Updates if needed. Within 30 days, verify patch deployment completion, review system logs and crash reports for anomalies related to graphics processing, confirm Chrome auto-update is enabled organization-wide, and conduct a compliance audit to ensure no systems remain on vulnerable versions.

Google Chrome EUVD-2026-65982

| CVE-2026-79230 HIGH

Improper Input Validation (CWE-20)

2026-08-25 Chrome

GHSA-m45c-4566-9xxr

Google RCE

8.8

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

9.6 CRITICAL

S:C assigned because successful exploitation escapes the renderer sandbox, extending impact to the broader host OS context beyond Chrome's sandboxed process.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Primary rating from Vendor (Chrome).

CVSS VectorVendor: Chrome

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 26, 2026 - 16:05 vuln.today

CVSS changed

Aug 26, 2026 - 15:52 NVD

8.8 (HIGH)

CVE Published

Aug 25, 2026 - 20:10 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 25, 2026 - 20:10 cve.org

HIGH 8.8

DescriptionCVE.org

Improper input validation in ANGLE in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

AnalysisAI

Remote code execution outside Chrome's renderer sandbox is possible on macOS in all Chrome builds prior to 152.0.7977.65, triggered by improper input validation in the ANGLE graphics engine. An unauthenticated remote attacker (confirmed by PR:N in the provided CVSS vector) can exploit this by directing a macOS user to a specially crafted HTML page, which causes ANGLE to process malformed graphics input and execute attacker-controlled code outside the sandbox boundary. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Craft malicious HTML with ANGLE-triggering graphics payload

Delivery

Host page on attacker-controlled server

Exploit

Deliver link via phishing or malvertising to macOS Chrome users

Execution

User navigates to page in unpatched Chrome

Persist

ANGLE processes malformed input, validation bypass triggered

Impact

Execute arbitrary code outside renderer sandbox

Access

Craft malicious HTML with ANGLE-triggering graphics payload

Delivery

Host page on attacker-controlled server

Exploit

Deliver link via phishing or malvertising to macOS Chrome users

Execution

User navigates to page in unpatched Chrome

Persist

ANGLE processes malformed input, validation bypass triggered

Impact

Execute arbitrary code outside renderer sandbox

Vulnerability AssessmentAI

Exploitation	Exploitation is platform-scoped to macOS - Chrome on Windows and Linux is not affected by this vulnerability. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 8.8 rating (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) reflects a network-exploitable flaw requiring only a user to visit a web page, with no privilege or authentication barrier for the attacker. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker crafts an HTML page containing WebGL or canvas-based content specifically designed to trigger the improper input validation flaw in Chrome's ANGLE Metal backend on macOS. The attacker distributes a link to this page via phishing email or malvertising embedded in a legitimate ad network. …
Remediation	The primary fix is upgrading to Google Chrome 152.0.7977.65 or later on macOS, as confirmed by the Chrome stable channel release advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 24 hours, identify all macOS systems running Chrome in your environment and communicate the patch urgency to device owners and IT operations. …

Threat intelligence, references, and detailed analysis are available after sign-in.