CRITICAL CWE-416
CVE-2026-79282
Google Chrome vulnerability
Google·Chrome
9.6/ 10
CVSS 3.1
Critical severity
0.48%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 42% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Aug 25, 2026
- Updated
- Aug 27, 2026
- First covered
- Aug 26, 2026
- Latest story
- 3 months ago
Summary
Use after free in ANGLE in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CWE-416Use after free
Attack profile
Attack vectorNetwork
ComplexityLow
PrivilegesNone
User interactionRequired
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HAffected products
- Google Chrome152.0.7977.65 to before 152.0.7977.65