CVE Catalog
CVE-2026-79091
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
Use after free in the Bluetooth component in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Medium)
Risk Assessment
An attacker could execute malicious code outside the sandbox, potentially leading to full system compromise and severe security breaches.
Recommendation
Update Google Chrome on Mac to the latest version to remediate this vulnerability.
Original NVD description (English source)
Use after free in Bluetooth in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)