CVE Catalog
CVE-2026-79056
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.41%
34th percentile - higher than 34% of all known CVEs
Summary
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Risk Assessment
Arbitrary code execution outside the sandbox could lead to system compromise, posing a severe security threat.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to fix this vulnerability.
Original NVD description (English source)
Use after free in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)