CVE-2026-78935
Critical · 9.6CVSS
9.6
EPSS
—
Published
Aug 25, 2026
CISA due date
—
The record
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-112898 Pillow is a Python imaging library. CWE-457
- CVE-2026-112893 Pillow is a Python imaging library. CWE-457
- CVE-2026-109828 A vulnerability was found in libsndfile up to 1.2.2. CWE-457
- CVE-2026-84391 A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through… CWE-457
- CVE-2026-84639 Triggering an error condition in certain MIME bodies would cause uninitialized memory to… CWE-457
- CVE-2026-62986 OpenEXR is the reference implementation and specification for the EXR image file format… CWE-457
- CVE-2026-76919 ESS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of… CWE-457
- CVE-2026-17077 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service… CWE-457