CVE Catalog
CVE-2026-79052
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.46%
38th percentile - higher than 38% of all known CVEs
Summary
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Critical)
Risk Assessment
An attacker can execute arbitrary code outside the sandbox, potentially leading to full system compromise.
Recommendation
Immediately update Google Chrome to version 152.0.7977.65 or later to prevent exploitation.
Original NVD description (English source)
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)