CVE Catalog
CVE-2026-78964
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.52%
42th percentile - higher than 42% of all known CVEs
Summary
Use after free in Sync in Google Chrome on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Low)
Risk Assessment
Arbitrary code execution outside the sandbox could lead to full system compromise, posing a critical security threat.
Recommendation
Update Google Chrome on iOS to version 152.0.7977.65 or later to mitigate this vulnerability.
Original NVD description (English source)
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)