CVE Catalog
CVE-2026-78935
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.41%
34th percentile - higher than 34% of all known CVEs
Summary
Use of uninitialized variable in the Mobile component in Google Chrome on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a critical severity rating.
Risk Assessment
An attacker could execute arbitrary code outside the sandbox, potentially leading to full compromise of the iOS device.
Recommendation
Update Google Chrome on iOS to version 152.0.7977.65 or later to fix this vulnerability.
Original NVD description (English source)
Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)