CVE Catalog
CVE-2026-78951
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.52%
42th percentile - higher than 42% of all known CVEs
Summary
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.
Risk Assessment
The risk involves potential execution of malicious code outside the sandbox, which could lead to system security breaches.
Recommendation
It is recommended to immediately update Google Chrome to the latest version to eliminate this vulnerability.
Original NVD description (English source)
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)