CVE-2026-76035: Input Validation

Q: Which systems are exposed and what does an attacker need to exploit this?

Users of Google Chrome on Mac with versions earlier than 151.0.7922.169 are affected. The issue is triggered remotely through a crafted HTML page.

Q: Is a non-default configuration required for exploitation?

The provided information does not identify a configuration prerequisite or user action beyond reaching a crafted HTML page. Treat affected Chrome installations on Mac as exposed when they browse attacker-controlled or malicious web content.

Q: What is the remediation?

Update Google Chrome on Mac to version 151.0.7922.169 or later. The provided information does not specify an alternative mitigation if updating is not immediately possible.

Published Aug 18, 2026

Updated

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<151.0.7922.169

Event History

Aug 18, 2026

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionWeakness

Frequently Asked Questions

Which systems are exposed and what does an attacker need to exploit this?

Users of Google Chrome on Mac with versions earlier than 151.0.7922.169 are affected. The issue is triggered remotely through a crafted HTML page.

Is a non-default configuration required for exploitation?

The provided information does not identify a configuration prerequisite or user action beyond reaching a crafted HTML page. Treat affected Chrome installations on Mac as exposed when they browse attacker-controlled or malicious web content.

What is the remediation?

Update Google Chrome on Mac to version 151.0.7922.169 or later. The provided information does not specify an alternative mitigation if updating is not immediately possible.