Live › vulnerability › CVE-2026-76030
A memory corruption bug in the FileSystem component of Google Chrome before 156.0.8078.79 lets a remote attacker run code inside the browser sandbox by serving a crafted HTML page. Chromium rates it High severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 01:27 UTC. All times on this page are UTC.
Anyone running Google Chrome before 156.0.8078.79 who visits websites, including sites an attacker controls or has injected content into. The flaw is reached by loading a crafted HTML page, so no account is needed. Chromium-based browsers that pull their own builds need their own vendor updates.
No product ranges from the sources yet.
chrome://settings/help or the Help menu in Chrome.156.0.8078.79.156.0.8078.79 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
This page as .md · .json · in your agent: get_signal("CVE-2026-76030")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.