CVE Catalog

CVE-2026-79047

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.46%

38th percentile - higher than 38% of all known CVEs

Summary

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)

Risk Assessment

An attacker can execute arbitrary code outside the sandbox, potentially leading to full system compromise.

Recommendation

Update Google Chrome to version 152.0.7977.65 or later to mitigate this vulnerability.

Original NVD description (English source)

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS