CVE-2026-78894: Race Condition

Q: What level of access does an attacker need to exploit this issue?

The attacker must first compromise the Chrome renderer process. Exploitation then uses a crafted HTML page to leak cross-origin data.

Q: Which Chrome versions should be updated?

Chrome versions prior to 152.0.7977.65 are affected. Update to 152.0.7977.65 or later.

Published Aug 25, 2026

Updated

Race condition in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome<152.0.7977.65

Event History

Aug 25, 2026

CVE Published

via MITRE·08:10 PM

Data Sourced

via MITRE·08:10 PM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must first compromise the Chrome renderer process. Exploitation then uses a crafted HTML page to leak cross-origin data.

Which Chrome versions should be updated?

Chrome versions prior to 152.0.7977.65 are affected. Update to 152.0.7977.65 or later.

CVE-2026-78894: Race Condition

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which Chrome versions should be updated?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Which Chrome versions should be updated?