Executive brief
Google Chrome is a widely-used web browser installed on millions of computers and devices globally. This vulnerability allows an attacker who has already compromised Chrome's renderer process (the part that displays web pages) to break out of Chrome's security sandbox and run malicious code with full system privileges. A crafted HTML page could be used as a delivery mechanism, potentially leading to complete system compromise.
Technical details
This vulnerability involves improper resource control in the Linux Toolkit Theming component of Google Chrome versions prior to 151.0.7922.173. The root cause is insufficient bounds checking or resource isolation in the theming subsystem, allowing a compromised renderer process to manipulate toolkit resources and escape the browser's sandbox. The attack requires an initial compromise of the renderer process (e.g., via a separate browser vulnerability), but does not require user interaction beyond visiting a crafted HTML page. Successful exploitation enables arbitrary code execution outside the sandbox with the privileges of the Chrome process. The vulnerability was patched in Chrome 151.0.7922.173 and later versions.
Affected products
- Google Chrome prior to 151.0.7922.173
Timeline
- 2026-08-20: disclosed: CVE-2026-76023 publicly disclosed in Chrome stable release 151.0.7922.173
- 2026-08-20: patched: Fixed in Chrome 151.0.7922.173 and later