CVE Catalog

CVE-2026-79012

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.57%

45th percentile - higher than 45% of all known CVEs

Summary

Use after free in Safebrowsing in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Risk Assessment

An attacker could gain control of the user's system by executing malicious code outside the sandbox, potentially leading to full system compromise.

Recommendation

Immediately update Google Chrome on Mac systems to a version containing the fix.

Original NVD description (English source)

Use after free in Safebrowsing in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS