CVE-2026-76034
published 2026-08-18CVE-2026-76034: Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML…
PriorityP352high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.57%
46.1th percentile
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 151.0.7922.169 | 151.0.7922.169 | |
| chrome | >= 151.0.7922.169 < 151.0.7922.169 | 151.0.7922.169 | |
| chrome_desktop | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Chrome up to 151.0.7922.137 WebGL buffer overflow (EUVD-2026-61223 / Nessus ID 338835)
vuldb·2026-08-23·CVSS 8.8
CVE-2026-76034 [HIGH] Google Chrome up to 151.0.7922.137 WebGL buffer overflow (EUVD-2026-61223 / Nessus ID 338835)
A vulnerability identified as critical has been detected in Google Chrome. The impacted element is an unknown function of the component WebGL. This manipulation causes buffer overflow.
This vulnerability is handled as CVE-2026-76034. The attack can be initiated remotely. There is not any exploit available.
You should upgrade the affected component.
GHSA
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
ghsa_unreviewed·2026-08-18
CVE-2026-76034 [HIGH] CWE-122 Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Chrome
Stable Channel Update for Desktop: CVE-2026-76034
vendor_chrome·2026-08-18
CVE-2026-76034 [CRITICAL] Stable Channel Update for Desktop: CVE-2026-76034
Stable Channel Update for Desktop
CVE-2026-76034: Buffer overflow in WebGL. Reported by Google on 2026-07-15 [N/A][ 540087398 ] Critical CVE-2026-76036: Buffer overflow in Dawn
Reported by Google on 2026-07-28 [N/A][ 516715010 ] High CVE-2026-76033: Inappropriate implementation in CORS
Severity: critical
No detection rules found.
No public exploits indexed.
Hackernews
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
blogs_hackernews·2026-08-24
CVE-2026-19478 ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet.
That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder than they actually are.
Plenty to clean up. Here’s the short version.
## ⚡ Threat of the Week
U.S. Warns of AI-Powered Attacks on Siemens PLCs — Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series program
Bugzilla
CVE-2026-76034 chromium: Chromium: Arbitrary code execution via WebGL buffer overflow [fedora-all]
bugzilla·2026-08-19·CVSS 8.8
CVE-2026-76034 [HIGH] CVE-2026-76034 chromium: Chromium: Arbitrary code execution via WebGL buffer overflow [fedora-all]
CVE-2026-76034 chromium: Chromium: Arbitrary code execution via WebGL buffer overflow [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Bugzilla
CVE-2026-76034 chromium: Chromium: Arbitrary code execution via WebGL buffer overflow [epel-all]
bugzilla·2026-08-19·CVSS 8.8
CVE-2026-76034 [HIGH] CVE-2026-76034 chromium: Chromium: Arbitrary code execution via WebGL buffer overflow [epel-all]
CVE-2026-76034 chromium: Chromium: Arbitrary code execution via WebGL buffer overflow [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Bugzilla
CVE-2026-76034 chromium-browser: Chromium: Arbitrary code execution via WebGL buffer overflow
bugzilla·2026-08-18·CVSS 8.8
CVE-2026-76034 [HIGH] CVE-2026-76034 chromium-browser: Chromium: Arbitrary code execution via WebGL buffer overflow
CVE-2026-76034 chromium-browser: Chromium: Arbitrary code execution via WebGL buffer overflow
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
2026-08-18
Published