CVE Catalog
CVE-2026-79290
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Risk Assessment
An attacker could gain full control of the system outside the sandbox, potentially leading to complete system compromise and data integrity violation.
Recommendation
Update Google Chrome to version 152.0.7977.65 or later to fix this vulnerability.
Original NVD description (English source)
Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)