Executive brief
Google Chrome's TabStrip component contains an incorrect authorization vulnerability that allows a remote attacker to execute arbitrary code outside the browser's security sandbox. An attacker must first compromise the renderer process and use social engineering to trick a user into opening a crafted webpage. Successful exploitation could lead to complete system compromise and data theft.
Technical details
This vulnerability is an authorization bypass (CWE-863) in Chrome's TabStrip component that allows escaping the sandbox. The root cause is improper permission enforcement in the TabStrip implementation. The attack requires two preconditions: the renderer process must be compromised and the user must be socially engineered to open a malicious HTML page. Once both conditions are met, an attacker can execute arbitrary code with system privileges outside the sandbox. The vulnerability is fixed in Chrome 152.0.7977.75 and later versions.
Affected products
- Google Chrome prior to 152.0.7977.75
Timeline
- 2026-09-02: disclosed: CVE-2026-84335 published
- 2026-09-02: patched: Fixed in Chrome 152.0.7977.75