CVE Catalog
CVE-2026-79149
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.41%
34th percentile - higher than 34% of all known CVEs
Summary
A use-after-free vulnerability in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a high severity.
Risk Assessment
An attacker could execute arbitrary code outside the sandbox, potentially leading to system compromise and data theft.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to mitigate this vulnerability.
Original NVD description (English source)
Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)