CVE-2026-85053: Improper resource exposure in CacheStorage
Published Aug 26, 2026
·Updated
Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Credit
Salvatore Gulizia (Serotav)
Affected Software
2 affected componentsFixes available
Google Google Chrome<152.0.7977.82
Google Chrome<152.0.7977.82
152.0.7977.82
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.7977.82
Event History
Aug 26, 2026
CVE Published
12:00 AM
Data Sourced
12:00 AM
SeverityWeaknessAffected Software
Sep 3, 2026
CVE Published
via MITRE·07:26 PM
Data Sourced
via MITRE·07:26 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What must an attacker do to exploit this issue?
The attacker must induce a user to load a crafted HTML page. Successful exploitation allows arbitrary code execution inside the Chrome sandbox.
2
Which Chrome versions are affected?
Google Chrome versions prior to 152.0.7977.82 are affected. Chrome 152.0.7977.82 is identified as the version boundary in the available data.