CVE Catalog
CVE-2026-79232
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
Use after free in Aura in Google Chrome before 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Risk Assessment
An attacker may gain control of the system outside the browser sandbox, posing a serious threat to data integrity and confidentiality.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to fix this critical vulnerability.
Original NVD description (English source)
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)