CVE-2026-76044 is a race condition vulnerability in the USB handling code of Google Chrome versions before 151.0.7922.169. An attacker who has already compromised the renderer process can exploit this flaw by delivering a specially crafted HTML page, potentially enabling arbitrary code execution outside the browser's sandbox environment. The vulnerability has a CVSS 3.1 base score of 8.3, indicating high severity with network attack vector, high complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability. The issue was publicly disclosed with a vendor advisory from Google indicating a stable channel update that addresses this flaw.

Successful exploitation allows an attacker with control over the renderer process to execute arbitrary code outside the sandbox, which can lead to full compromise of the affected system. This elevates the attacker's capabilities beyond the browser sandbox, increasing the risk of system-level compromise.

Google has released an official fix in Chrome version 151.0.7922.169. Users and administrators should update to this version or later to remediate the vulnerability. No additional mitigation steps are indicated by the vendor advisory.