First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-79091

CriticalCVSS 9.6/10Last modified Aug 27, 2026

Description

Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Google	Chrome	>= 152.0.7977.65, < 152.0.7977.65

References

https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.htmlRelease Notes, Vendor Advisory
https://issues.chromium.org/issues/523557855Permissions Required

Timeline

Published: Aug 25, 2026
Last modified: Aug 27, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-790934.3Incorrect authorization in Paint in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy v CVE-2026-790946.5Race condition in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a craft CVE-2026-790954.3Information leak in Payments in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain cross-origin data via a crafted HTM CVE-2026-790978.8Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a cr CVE-2026-790984.3UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to CVE-2026-790996.5Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via CVE-2026-79109.6Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass CVE-2026-791033.1Incorrect reference resolution in Speech in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer CVE-2026-791045.3Missing authorization in Sensor in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process t CVE-2026-791054.3Improper input validation in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to bypass system access rest CVE-2026-791064.3Improper input validation in Input in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer proces CVE-2026-791076.5Incorrect authorization in TabGroups in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially leak sensitive informa