CVE Catalog
CVE-2026-79235
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Risk Assessment
The risk is the potential to execute arbitrary code outside the sandbox, which could lead to full system compromise.
Recommendation
It is recommended to immediately update Google Chrome to version 152.0.7977.65 or later.
Original NVD description (English source)
Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)