CVE Catalog

CVE-2026-79257

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.33%

25th percentile - higher than 25% of all known CVEs

Summary

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Risk Assessment

An attacker can execute arbitrary code outside the sandbox, potentially leading to full system compromise or malware installation.

Recommendation

Immediately update Google Chrome to version 152.0.7977.65 or later to prevent exploitation.

Original NVD description (English source)

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS