CVE-2026-79128

CriticalCVSS 9.6

Published: 25/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

Use-after-free in Views in Google Chrome on Mac before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.

Risk Assessment

Risk of arbitrary code execution outside the sandbox, potentially leading to system integrity compromise.

Recommendation

Update Google Chrome on Mac to version 152.0.7977.65 or later to fix the issue.

Original NVD description (English source)

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)