CVE-2026-78935
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- EPSS probability
- 0.51%
- CWE
- CWE-457
- Published
- 2026-08-25
- Last modified
- 2026-08-27
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-84391 — A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may...
- CVE-2026-62986 — OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure
- CVE-2026-76919 — Use of Uninitialized Variable in Wireshark
- CVE-2026-17077 — IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
- CVE-2026-19212 — WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable
- CVE-2026-19161 — Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
- CVE-2026-19160 — Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
- CVE-2026-19146 — Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote...