CVE-2026-78934
ADVISORY - nistSummary
Race condition in ReadAloud in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
EPSS Score: 0.00381 (0.311)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-78934
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| debian/chromium | deb | debian | 13 | <152.0.7977.75-1~deb13u1 | 152.0.7977.75-1~deb13u1 |
| debian/chromium | deb | debian | unstable | <152.0.7977.64-1 | 152.0.7977.64-1 |
| debian/chromium | deb | debian | 14 | >0 | Not yet available |
| debian/chromium | deb | debian | 12 | <152.0.7977.75-1~deb12u1 | 152.0.7977.75-1~deb12u1 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-78934
EXPLOITABILITY SCORE
1.6
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
8.3highUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-78934
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumChainguard
CREATED
UPDATED
ADVISORY ID
CGA-283f-jvq2-2f27
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
minimos
CREATED
UPDATED
ADVISORY ID
MINI-7wx5-hvxm-w6jg
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-