CVE-2026-91708

Overview

A race condition in Chrome’s network stack (prior to 153.0.8010.47) lets a remote attacker who has already compromised the renderer process read cross‑origin data from a crafted HTML page. The flaw is limited to situations where the renderer is already under attacker control, but it can expose sensitive information across origins.

Description

Race condition in Network in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: High)

Impact

{'confidentiality': 'Potential leakage of cross‑origin data (e.g., cookies, local storage, or other sensitive content) if the renderer process is compromised.', 'integrity': 'No direct impact on data integrity.', 'availability': 'No impact on availability.'}

Remediation

['Upgrade all Chrome‑based browsers to version 153.0.8010.47 or later.', 'Ensure that the browser’s sandbox and process isolation features are enabled (default in modern Chrome builds).', 'Apply any OS‑level security updates that strengthen sandbox enforcement.', 'Monitor for signs of renderer process compromise (e.g., unexpected network activity or elevated privileges).', 'Consider disabling or restricting remote content that could be used to trigger the race condition if patching is delayed.']

Risk context

The CVSS v3 score of 3.1 and low severity rating indicate a modest risk, but the vulnerability can be leveraged only after an attacker has already breached the renderer process. Prompt patching is recommended to eliminate the attack vector, though the overall threat is limited to environments where renderer compromise is possible.

Affected products

• Google Chrome
• Microsoft Edge
• Chromium
• Brave
• Vivaldi
• Opera
• Android Chrome
• iOS Chrome