CVE-2026-78945
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Medium)
Risk Assessment
The risk involves potential remote code execution outside the sandbox, which could compromise system integrity and data.
Recommendation
It is recommended to update Google Chrome to version 152.0.7977.65 or later and educate users about social engineering.
Original NVD description (English source)
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)