CVE-2026-76033
🔶 mediumSummary
Inappropriate implementation in CORS in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
CVSS Score
4.2
Medium
EPSS Score
0.3
Exploit Probability
Published Date
2026-08-18
First Seen: 2026-08-19
📊 Relative Risk Intelligence
This CVE is Lower Risk - more severe than 5.3% of all 348,756 vulnerabilities in our database.
#330,126
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Aug 19, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by
CISA
Last Modified
2026-08-20
Source
NVD 🔗
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
CWE IDs (Weakness Types)