CVE-2026-79026
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
A use-after-free vulnerability in Extensions in Google Chrome prior to 152.0.7977.65 allows a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. It has a high severity.
Risk Assessment
An attacker could gain full control over the user's system, potentially leading to malware installation or data theft.
Recommendation
Immediately update Google Chrome to version 152.0.7977.65 or later and be cautious when installing extensions.
Original NVD description (English source)
Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)