CVE-2026-17952

Analyzed Analyzed - Analysis Complete

Inappropriate Implementation in Google Chrome V8 Allows Code Execution

Publication date: 2026-07-30

Last updated on: 2026-07-31

Assigner: Chrome

Description

Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-07-31

Generated

2026-08-19

AI Q&A

2026-07-30

EPSS Evaluated

2026-08-18

NVD

CVE-2026-17952

EUVD

EUVD-2026-50878

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.72 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-269	The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

Executive Summary

This vulnerability is due to an inappropriate implementation in V8, the JavaScript engine used by Google Chrome. It allows an attacker to trick a user into installing a malicious extension, which can then execute arbitrary code within a sandboxed environment.

Detection Guidance

This vulnerability involves a malicious Chrome extension exploiting a V8 implementation flaw in Google Chrome prior to version 151.0.7922.72. Detection requires checking Chrome version and reviewing installed extensions for suspicious activity.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system through a compromised Chrome extension. This could lead to unauthorized access, data theft, or further compromise of your device.

Compliance Impact

This vulnerability allows arbitrary code execution inside a sandbox via a malicious extension, which could lead to unauthorized data access or modification. This may impact compliance with GDPR by risking personal data exposure and HIPAA by potentially compromising protected health information if exploited.

Mitigation Strategies

Update Google Chrome to version 151.0.7922.72 or later to address the vulnerability. Remove any suspicious or unnecessary extensions from the browser.

Hi! I’m here to help you understand CVE-2026-17952. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70