What is GHSA-w6fp-j497-w2rr?

GHSA-w6fp-j497-w2rr is a security advisory published by GitHub Security Advisories with Critical severity. Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...

Which CVE IDs does GHSA-w6fp-j497-w2rr cover?

GHSA-w6fp-j497-w2rr covers the following CVE IDs: CVE-2026-78989. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w6fp-j497-w2rr?

GHSA-w6fp-j497-w2rr has a CVSS v3 base score of 9.6, published by GitHub Security Advisories.

GHSA-w6fp-j497-w2rrCriticalCVSS 9.6

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a...

Vendor

GitHub Security Advisories

Published

August 25, 2026

Last Modified

August 26, 2026

🔗 CVE IDs covered (1)

CVE-2026-78989 →

📋 Description

Out of bounds read in ANGLE in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-78989
https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html
https://issues.chromium.org/issues/532617619
https://github.com/advisories/GHSA-w6fp-j497-w2rr