CVE-2026-79083

Analyzed Analyzed - Analysis Complete

Improper Workflow Enforcement in Google Chrome

Publication date: 2026-08-25

Last updated on: 2026-08-27

Assigner: Chrome

Description

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-27

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-79083

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 152.0.7977.65 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-841	The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence.

Attack-Flow Graph

Executive Summary

This vulnerability involves improper enforcement of behavioral workflow in Google Chrome's Media component. A remote attacker who already compromised the renderer process could potentially execute arbitrary code outside the sandbox by tricking a user into visiting a specially crafted HTML page.

Detection Guidance

This vulnerability involves improper enforcement in Google Chrome's Media component. Detection requires checking Chrome version and monitoring for suspicious renderer process behavior. Use commands like 'google-chrome --version' to verify version and 'ps aux | grep chrome' to inspect running processes for unusual renderer activity.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your system even if they only gained control of the Chrome renderer process. This could lead to unauthorized access, data theft, or further compromise of your device.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with standards like GDPR or HIPAA. The vulnerability involves improper enforcement in Chrome, potentially allowing code execution outside the sandbox, which could lead to unauthorized data access or processing. However, explicit compliance implications are not detailed in the given context.

Mitigation Strategies

Update Google Chrome to version 152.0.7977.65 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-79083. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70