CVE-2026-76044

Received Received - Intake

Race Condition in Google Chrome USB Component

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: Chrome

Description

Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-18

Last Modified

2026-08-18

Generated

2026-08-19

AI Q&A

2026-08-19

EPSS Evaluated

N/A

NVD

CVE-2026-76044

EUVD

EUVD-2026-61227

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 151.0.7922.169 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This is a race condition vulnerability in USB handling within Google Chrome before version 151.0.7922.169. A race condition occurs when the system's behavior depends on the timing of events, which can lead to unexpected outcomes. In this case, an attacker who has already compromised the renderer process could exploit this flaw to execute arbitrary code outside the browser's sandbox by tricking a user into visiting a specially crafted HTML page.

Impact Analysis

If you are using an affected version of Google Chrome, an attacker could potentially take control of your computer by exploiting this vulnerability. This could lead to unauthorized access to your data, installation of malware, or other malicious activities. The impact is significant because the attacker can bypass the browser's security sandbox, which is designed to limit the damage from compromised processes.

Mitigation Strategies

Update Google Chrome to version 151.0.7922.169 or later to address the race condition in USB handling.

Hi! I’m here to help you understand CVE-2026-76044. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70