ZeroHour

CVE-2026-91709

CVSS
EPSS
Published
()
Modified
Description

Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Weakness
CWE-843

In the news

No ingested article mentions this CVE yet.