CVE-2026-76040
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Use after free in Browser in Google Chrome on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
An attacker could exploit this vulnerability to execute code outside the sandbox, potentially leading to full system compromise or access to sensitive data, especially if the user falls for social engineering.
Recommendation
Update Google Chrome on Mac to version 151.0.7922.169 or later. Users should also be cautious of suspicious links and pages.
Original NVD description (English source)
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)