Description
Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-08-20
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Buffer overflow in the Network component of Google Chrome prior to 151.0.7922.173 can be triggered by a crafted HTML page. The flaw allows a remote attacker to execute arbitrary code outside the browser sandbox, giving full system compromise. The weakness is identified as CWE-122.

Affected Systems

The vulnerability affects Google Chrome. No specific version ranges are listed other than the mentioned pre‑151.0.7922.173 threshold.

Risk and Exploitability

The CVSS score is 8.8, indicating high severity. The EPSS score is < 1%, suggesting low exploitation probability. The vulnerability is not listed in the CISA KEV catalog, but the lack of evidence of exploitation does not reduce the need for a patch. Attackers would need to obtain a specially crafted HTML page loaded in the browser, which can be delivered via a malicious website or email attachment, providing a straightforward remote code execution path.

Generated by OpenCVE AI on August 21, 2026 at 21:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to Google Chrome 151.0.7922.173 or later.
  • Enable automatic updates for Chrome to receive security patches promptly.
  • If immediate update is not possible, use a reputable browser security extension to block malicious JavaScript and reduce the risk until a patch is applied.

Generated by OpenCVE AI on August 21, 2026 at 21:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4758-1 chromium security update
Debian DSA Debian DSA DSA-6476-1 chromium security update
History

Tue, 25 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Fri, 21 Aug 2026 21:45:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in Chrome's Network Component Allows Remote Code Execution

Fri, 21 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 21 Aug 2026 01:30:00 +0000

Type Values Removed Values Added
Title Buffer Overflow in Chrome's Network Component Allows Remote Code Execution

Thu, 20 Aug 2026 23:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 20 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Description Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-122
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-08-22T03:56:30.636Z

Reserved: 2026-08-18T19:28:12.344Z

Link: CVE-2026-76022

cve-icon Vulnrichment

Updated: 2026-08-21T18:39:14.201Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-20T21:17:10.420

Modified: 2026-08-25T16:37:37.720

Link: CVE-2026-76022

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T21:30:17Z

Weaknesses
  • CWE-122

    Heap-based Buffer Overflow