Loading vulnerability…
Sandboxed code execution via ServiceWorker type confusion in Google Chrome
CVE-2026-91715 is a high-severity type-confusion vulnerability in the ServiceWorker component of Google Chrome before version 153.0.8010.47. A remote attacker can trigger the vulnerability through a crafted HTML page to execute arbitrary code inside the browser sandbox. The vulnerable Chromium component also affects downstream browsers, including Microsoft Edge and Prisma Browser. The specific vulnerable function and detailed exploitation mechanism are not publicly specified.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation permits arbitrary code execution within the browser sandbox, potentially compromising the confidentiality, integrity, and availability of resources accessible to the affected sandboxed process. This vulnerability alone does not establish sandbox escape, operating-system privilege escalation, or unrestricted host compromise.
If you can’t patch tonight, do this now.
No vulnerability-specific workaround is identified. Until patched, limit exposure to untrusted web content, enforce URL filtering and browser-management controls, and retain browser sandboxing and least-privilege protections. These measures reduce exposure but do not correct the type-confusion flaw.
Patch, then assume compromise.
Upgrade Google Chrome to 153.0.8010.47 or later on Windows and Linux, and 153.0.8010.48 or later on macOS. Restart the browser to activate the update. Upgrade Microsoft Edge to 153.0.4234.46 or later. For Prisma Browser, version 153.3.4.48 fixes this CVE; version 155.16.5.40 or later also addresses the complete October security update. On Debian 13, install Chromium 153.0.8010.47-2~deb13u1 or later. For affected Fedora and EPEL installations, install the applicable vendor-provided Chromium 153.0.8010.52 security build or later and log out and back in.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
20 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.