CVE-2026-76037: Google Chrome

High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days.

Link following in CredentialProvider in Google Chrome on on Windows prior to 151.0.7922.169 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

Affected products

• Google Chrome: before 151.0.7922.169 (fixed in 151.0.7922.169)

Published 2026-08-18. Last modified 2026-08-20.