CVE-2026-78935: Google Google Chrome vulnerability

Q: Which Chrome installations are affected?

Google Chrome on iOS versions prior to 152.0.7977.65 are affected. The provided data does not identify other platforms as affected.

Q: What does an attacker need to exploit this issue?

The attacker needs to induce the target to process a crafted HTML page remotely. Successful exploitation could potentially execute arbitrary code outside the sandbox.

Q: How can I determine whether a device is vulnerable?

Check the installed Google Chrome version on the iOS device. Versions earlier than 152.0.7977.65 are affected.

Published Aug 25, 2026

Updated

Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected Software

1 affected component

Google Google Chrome<152.0.7977.65

Event History

Aug 25, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations are affected?

Google Chrome on iOS versions prior to 152.0.7977.65 are affected. The provided data does not identify other platforms as affected.

What does an attacker need to exploit this issue?

The attacker needs to induce the target to process a crafted HTML page remotely. Successful exploitation could potentially execute arbitrary code outside the sandbox.

How can I determine whether a device is vulnerable?

Check the installed Google Chrome version on the iOS device. Versions earlier than 152.0.7977.65 are affected.

CVE-2026-78935: Google Google Chrome vulnerability

Affected Software

Event History

Frequently Asked Questions

Which Chrome installations are affected?

What does an attacker need to exploit this issue?

How can I determine whether a device is vulnerable?

Company

Resources

Contact

Frequently Asked Questions

Which Chrome installations are affected?

What does an attacker need to exploit this issue?

How can I determine whether a device is vulnerable?