Executive brief
A security vulnerability exists in Google Chrome's USB handling component. An attacker could use a specially crafted website to gain higher-level permissions on a user's system than intended. This could potentially allow unauthorized access to sensitive system resources or data. Users should update to the latest version of Chrome to mitigate this risk.
Technical details
A privilege escalation vulnerability exists in the WebUSB implementation of Google Chrome. The flaw stems from insufficient policy enforcement when handling USB device interactions. A remote attacker can exploit this by enticing a user to visit a malicious, specially crafted HTML page. Successful exploitation allows the attacker to bypass intended security boundaries and escalate privileges within the browser context. The issue is resolved in Google Chrome version 151.0.7922.72.
Affected products
- Google Chrome prior to 151.0.7922.72
Timeline
- 2026-07-29: patched: Fixed in Chrome Stable Channel Update 151.0.7922.72
- 2026-07-30: disclosed: NVD publication date