CVE-2026-79033
High · 8.8CVSS
8.8
EPSS
—
Published
Aug 25, 2026
CISA due date
—
The record
Insufficient control flow management in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-51675 An issue was discovered in openRISC OR1200 commit 83ac6b. CWE-691
- CVE-2026-5938 Improper control flow management allows a crafted document action chain to cause modal… CWE-691
- CVE-2025-35963 Insufficient control flow management for some Intel(R) PROSet/Wireless WiFi Software for… CWE-691