CVE-2026-79289
Low · 3.1CVSS
3.1
EPSS
—
Published
Aug 25, 2026
CISA due date
—
The record
Improper control of a resource through its lifetime in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-79603 x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to… CWE-664
- CVE-2026-18549 @fastify/multipart is a multipart form-data parser for Fastify. CWE-664
- CVE-2026-64721 This issue was addressed through improved state management. CWE-664
- CVE-2026-20158 As part of Cisco's ongoing commitment to proactive security and product quality, the… CWE-664
- CVE-2026-8582 Object lifecycle issue in Dawn in Google Chrome prior to 148.0.7778.168 allowed a remote… CWE-664
- CVE-2026-8517 Object lifecycle issue in WebShare in Google Chrome on Mac prior to 148.0.7778.168… CWE-664
- GHSA-f9jp-856v-8642 PocketMine-MP: Player entities can still die and drop items in flaggedForDespawn state CWE-664