CVE-2026-91715 is a type confusion vulnerability in the ServiceWorker implementation of Google Chrome versions before 153.0.8010.47. Exploitation of this flaw enables remote attackers to execute arbitrary code inside the sandbox environment via a specially crafted HTML page. The vulnerability was publicly disclosed with a high severity rating by Chromium security. The vendor has released an update to version 153.0.8010.47 that addresses this issue.

Successful exploitation could allow remote code execution within the sandboxed environment of the browser, potentially leading to unauthorized actions or compromise of browser security boundaries. However, the code execution is confined to the sandbox, limiting the attacker's capabilities outside the browser context.

Users should update Google Chrome to version 153.0.8010.47 or later, where this vulnerability has been fixed. The vendor advisory confirms that the issue is addressed in this stable channel update. No additional mitigation steps are required once the update is applied.