Chrome Network: run code in the sandbox (fix 156.0.8078.79)

high severity ยท published 2026-10-30

A remote attacker can run their own code inside Chrome's sandbox through crafted network traffic, using an improper input validation flaw in the Network component of Chrome. Chromium rates it High.

Fixed in: 156.0.8078.79

CVE: CVE-2026-76029

Source: NVD

Get the fix

Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 652 and your operating system.