CVE-2026-79263

Analyzed Analyzed - Analysis Complete

Race Condition in Google Chrome Extensions

Publication date: 2026-08-25

Last updated on: 2026-08-31

Assigner: Chrome

Description

Race condition in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-31

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-79263

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 152.0.7977.65 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-367	The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

Executive Summary

This is a race condition vulnerability in Google Chrome's Extensions feature. A race condition occurs when the system's behavior depends on the sequence or timing of uncontrollable events. In this case, it allows a remote attacker to execute arbitrary code inside Chrome's sandbox by sending specially crafted network traffic.

Detection Guidance

This vulnerability is specific to Google Chrome versions prior to 152.0.7977.65. Detection involves checking the installed Chrome version and monitoring for unusual activity. Use chrome://version/ to verify the version. If below 152.0.7977.65, update immediately. No direct commands detect the race condition itself, but monitoring for sandbox escapes or arbitrary code execution may indicate exploitation.

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your computer through Chrome, even though Chrome's sandbox is designed to prevent such actions. This could lead to unauthorized access to your data or system.

Compliance Impact

This vulnerability involves a race condition in Google Chrome's Extensions that could allow a remote attacker to execute arbitrary code inside the sandbox via crafted network traffic. Such vulnerabilities may impact compliance with standards like GDPR or HIPAA by potentially exposing sensitive user data or enabling unauthorized access to systems handling protected information.

Mitigation Strategies

Update Google Chrome to version 152.0.7977.65 or later to address the race condition vulnerability.

Hi! I’m here to help you understand CVE-2026-79263. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70