CVE-2026-93377: Google Chrome vulnerability

Q: Which Chrome installations require remediation?

Google Chrome versions earlier than 153.0.8010.52 are affected. Update to 153.0.8010.52 or later.

Q: What must an attacker do to trigger the issue?

The attacker must get a user to interact with a crafted HTML page, relying on social engineering. The disclosed impact is arbitrary code execution inside the sandbox.

Q: How can I determine whether an endpoint is affected?

Check the installed Google Chrome version. Systems running a version earlier than 153.0.8010.52 should be treated as affected.

Published Sep 17, 2026

Updated

Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<153.0.8010.52

Event History

Sep 17, 2026

CVE Published

via MITRE·09:08 PM

Data Sourced

via MITRE·09:08 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations require remediation?

Google Chrome versions earlier than 153.0.8010.52 are affected. Update to 153.0.8010.52 or later.

What must an attacker do to trigger the issue?

The attacker must get a user to interact with a crafted HTML page, relying on social engineering. The disclosed impact is arbitrary code execution inside the sandbox.

How can I determine whether an endpoint is affected?

Check the installed Google Chrome version. Systems running a version earlier than 153.0.8010.52 should be treated as affected.