CVE-2026-78915: Race condition in Google Chrome

This vulnerability involves a race condition in Google Chrome Enterprise on Windows platforms before version 152.0.7977.65. An adjacent attacker could potentially exploit this flaw by crafting network traffic to execute arbitrary code outside the browser sandbox. The CVSS 3.1 vector indicates the attack requires adjacent network access, high attack complexity, no privileges, no user interaction, and impacts confidentiality, integrity, and availability with high severity. The vendor advisory link is provided but does not explicitly confirm patch availability or remediation level in the input data.

Successful exploitation could lead to arbitrary code execution outside the sandbox, compromising system confidentiality, integrity, and availability. This could allow an attacker on the same network segment to gain control beyond the browser sandbox, posing a significant security risk.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until confirmation, users should consider updating to version 152.0.7977.65 or later if available. No additional vendor-provided mitigation instructions are included in the input data.