CVE-2026-91734: Google Google Chrome vulnerability
Published Sep 15, 2026
·Updated
Incorrect authorization in Core in Google Chrome on on Windows prior to 153.0.8010.47 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)
Affected Software
1 affected component
Google Google Chrome<153.0.8010.47
Event History
Sep 15, 2026
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
DescriptionWeakness
Frequently Asked Questions
1
Who is exposed to this vulnerability?
The issue affects Google Chrome on Windows before version 153.0.8010.47. Exploitation requires a local attacker and a local program.
2
What level of access does an attacker need?
An attacker must already be able to run a program locally on the affected Windows system. The vulnerability can then allow arbitrary code execution outside Chrome's sandbox.
3
What version resolves the issue?
Update Google Chrome on Windows to version 153.0.8010.47 or later.