CVE-2026-78909: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the Views component of Google Chrome versions before 152.0.7977.65. Exploitation requires user interaction via social engineering, where a crafted HTML page triggers arbitrary code execution outside the sandbox environment. The CVSS 3.1 score of 9.6 reflects network attack vector, low attack complexity, no privileges required, user interaction needed, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not specify patch or remediation details.

Successful exploitation can lead to arbitrary code execution outside the sandbox, potentially compromising the affected system's confidentiality, integrity, and availability. This could allow attackers to execute malicious code remotely by convincing users to visit a malicious web page.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution with untrusted web content and avoid social engineering attempts.