CVE Catalog
CVE-2026-78909
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.46%
38th percentile - higher than 38% of all known CVEs
Summary
A vulnerability in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. The issue is related to a use-after-free in the Views component.
Risk Assessment
An attacker can execute code outside the sandbox, potentially leading to full compromise of the system and data.
Recommendation
It is recommended to update Google Chrome to version 152.0.7977.65 or later immediately.
Original NVD description (English source)
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)