PT-2026-81591

CVE-2026-78985

Published

2026-04-06

Updated

2026-10-28

Description by

CVSS 2.0

Critical

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65

Description An incorrect reference resolution in the FileSystem component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML page.

Recommendations Update Google Chrome to version 152.0.7977.65 or later.

Exploitability

Fix

Vendors

Affected products

Weakness enumeration

CWE-706: Use of Incorrectly-Resolved Name or Reference

Related identifiers

CVE-2026-78985

BDU:2026-16956

ECHO-F133-F9D2-CF41

OPENSUSE-SU-2026:11628-1