CVE Catalog
CVE-2026-79064
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.24%
14th percentile - higher than 14% of all known CVEs
Summary
Use after free in Network in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)
Risk Assessment
Arbitrary code execution outside the sandbox could lead to full system compromise, posing a severe security threat.
Recommendation
Update Google Chrome on Mac to version 152.0.7977.65 or later to mitigate this vulnerability.
Original NVD description (English source)
Use after free in Network in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: Medium)