CVE Catalog
CVE-2026-79200
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Critical)
Risk Assessment
An attacker can execute arbitrary code outside the sandbox, potentially leading to full system compromise and severe security breach.
Recommendation
Immediately update Google Chrome to version 152.0.7977.65 or later to fix this critical vulnerability.
Original NVD description (English source)
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)