CVE Catalog

CVE-2026-79150

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.41%

34th percentile - higher than 34% of all known CVEs

Summary

A use-after-free vulnerability in Views in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a critical severity.

Risk Assessment

An attacker could execute arbitrary code outside the sandbox, potentially leading to full system compromise and severe security breaches.

Recommendation

Immediately update Google Chrome on Mac to version 152.0.7977.65 or later to mitigate this vulnerability.

Original NVD description (English source)

Use after free in Views in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS