Loading vulnerability…
Memory corruption in Chromium MediaStream
CVE-2026-76024 is a memory-corruption vulnerability in the MediaStream component of Google Chrome before version 156.0.8078.79 and affected Chromium-based browsers, including Microsoft Edge. A remote attacker can use a crafted HTML page to potentially read memory within the browser sandbox. Chromium classifies the vulnerability as Critical. The precise memory-corruption subtype and whether exploitation also permits arbitrary code execution inside the sandbox remain uncertain.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can potentially disclose memory accessible within the browser sandbox, compromising the confidentiality of data held there. The CVE-specific CVSS assessment assigns high confidentiality impact without integrity or availability impact. Sandboxed arbitrary code execution is inconsistently characterized and cannot be confirmed. Sandbox escape or unrestricted operating-system compromise is not established.
If you can’t patch tonight, do this now.
No CVE-specific temporary workaround is documented.
Patch, then assume compromise.
Update Google Chrome to version 156.0.8078.79 or later; the corresponding Windows and macOS release also includes build 156.0.8078.80. Restart the browser to activate the fix. Update Microsoft Edge to the latest vendor-supported fixed release because the exact fixed Edge version is inconsistent. For Debian stable (trixie), install Chromium 156.0.8078.79-1~deb13u1 or a later security update. For other Chromium packages and derivatives, apply the applicable vendor security update and verify that running browser processes use the patched build.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
34 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.