CVE-2026-79155: Race condition in Google Chrome

CVE-2026-79155 is a race condition vulnerability in the FileSystem feature of Google Chrome versions before 152.0.7977.65. An attacker who has already compromised the renderer process can exploit this flaw via a specially crafted HTML page to execute arbitrary code outside the browser's sandbox, potentially leading to full system compromise. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.3, indicating significant impact on confidentiality, integrity, and availability. There is no explicit vendor advisory detail on patch availability or remediation level, but the affected version is clearly identified as prior to 152.0.7977.65.

Successful exploitation allows remote code execution outside the sandbox from a compromised renderer process, which can lead to full system compromise. The vulnerability affects confidentiality, integrity, and availability with high impact.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Users should update to version 152.0.7977.65 or later once confirmed. Until then, no specific mitigation steps are provided.