CVE Catalog
CVE-2026-79140
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.41%
34th percentile - higher than 34% of all known CVEs
Summary
A use-after-free vulnerability in Views in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Risk Assessment
Arbitrary code execution outside the sandbox may lead to full system compromise on macOS, posing a serious threat to organizational security.
Recommendation
It is recommended to update Google Chrome on macOS to version 152.0.7977.65 or later to eliminate the vulnerability.
Original NVD description (English source)
Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)