Executive brief
Google Chrome's HTML parser contains a flaw in state validation that allows attackers to bypass the browser's sandbox protection. An attacker can craft a malicious HTML page that, when opened by a user, exploits this vulnerability to execute arbitrary code on the victim's system despite the sandbox protections that normally confine browser processes.
Technical details
The vulnerability is an improper state validation issue in Chrome's HTML Parser component. The flaw allows a remote attacker to craft a malicious HTML page that exploits this state validation bypass to execute arbitrary code within the browser sandbox. The attack requires only that a user visit a crafted webpage; no authentication or additional user interaction beyond normal browsing is required. An attacker successfully exploiting this vulnerability could achieve arbitrary code execution, potentially leading to system compromise, data theft, or further attacks. The fix is available in Chrome 152.0.7977.65 and later versions.
Affected products
- Google Chrome prior to 152.0.7977.65
Timeline
- 2026-08-25: disclosed: Published in Chrome 152 stable release
- 2026-08-25: patched: Fixed in Chrome 152.0.7977.65