Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-18T20:31:25 chromium-browser: Google Chrome: Arbitrary code execution due to a race condition in USB 9.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H CWE-368

Race condition in USB in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

A flaw was found in Google Chrome's USB component. A remote attacker, after compromising the renderer process, could exploit a race condition by using a specially crafted HTML page. This could potentially lead to the execution of arbitrary code outside of the browser's security sandbox, allowing the attacker to gain further control over the system.

This Important flaw in the `chromium-browser` package allows a remote attacker to execute arbitrary code outside the browser's sandbox. Exploitation requires a compromised renderer process and user interaction with a specially crafted HTML page, enabling a significant security bypass. https://www.cve.org/CVERecord?id=CVE-2026-76044 https://nvd.nist.gov/vuln/detail/CVE-2026-76044 https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html https://issues.chromium.org/issues/522732244