OCTOBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-91711

HIGH · CVSS 8.8 EPSS 0.31%

Source: NVD + CISA KEV + EPSS · Published 2026-09-15 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

A vulnerability in the ServiceWorker component of Google Chrome prior to version 153.0.8010.47 allows remote attackers to execute arbitrary code within the browser's sandbox through a specially crafted HTML page. This poses a significant risk as it could lead to unauthorized access and control over user sessions. Organizations using affected versions of Chrome should prioritize updating to mitigate potential exploitation.

CVE
CVE-2026-91711
Severity
HIGH
CVSS
8.8
EPSS
0.31%
Chrome

Original NVD Description

Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-106427 MEDIUM CVE-2026-106426 HIGH CVE-2026-106424 MEDIUM CVE-2026-106423 HIGH CVE-2026-106422 MEDIUM CVE-2026-106421 HIGH