EUVD-2026-74334
GHSA-qx3c-ccj2-g7fj
Severity by source
AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Network-triggered with no auth or interaction but high complexity for the reference-resolution race; sandbox escape yields scope change and full host code-execution impact.
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
Lifecycle Timeline
4DescriptionCVE.org
Incorrect reference resolution in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Medium)
AnalysisAI
Sandbox-escape remote code execution in Google Chrome's Extensions component (versions prior to 153.0.8010.36) lets a remote attacker potentially run arbitrary code outside the renderer sandbox by delivering crafted network traffic. The root cause is incorrect reference resolution (CWE-706), where a name or reference is resolved to the wrong target. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation targets the Extensions component of Google Chrome versions before 153.0.8010.36 and is triggered via crafted network traffic reaching the browser, requiring no authentication and no user interaction per the CVSS vector (PR:N/UI:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 base score is 9.0 (AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H): network-reachable, no privileges, no user interaction, scope-changed (sandbox escape), with full confidentiality/integrity/availability impact - but crucially high attack complexity (AC:H), meaning exploitation is not straightforward. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Vendor-released patch: update Google Chrome to 153.0.8010.36 or later, per the Chrome Stable Channel update (https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html); restart the browser to complete the update since Chrome staged updates apply on relaunch. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all Chrome installations across your organization including corporate endpoints, remote workers' devices, and any BYOD implementations; use endpoint management tools or browser telemetry to identify deployment scope and current versions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today