CVE-2026-79039: Use after free in Google Chrome
Description
CVE-2026-79039 is a use-after-free vulnerability in Google Chrome on iOS versions prior to 152.0.7977.65. This flaw allows a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. The vulnerability has a high severity rating with a CVSS score of 8.1. No confirmed exploits in the wild have been reported. The vendor advisory linked indicates a stable channel update addressing this issue.
CVSS v3.1
Score 8.1high
Affected software
Chrome
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability is a use-after-free bug in the mobile version of Google Chrome on iOS, affecting versions before 152.0.7977.65. It enables remote code execution outside the sandbox through specially crafted network traffic. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The issue is publicly disclosed and a vendor advisory is available, though explicit patch details are not included in the input data.
Potential Impact
Successful exploitation allows a remote attacker to execute arbitrary code outside the sandbox on affected Chrome iOS versions. This can lead to full compromise of the browser environment and potentially the underlying device. The high CVSS score reflects the critical impact on confidentiality, integrity, and availability without requiring user interaction or privileges.
Mitigation Recommendations
A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update affected Chrome installations on iOS to this version or later. The vendor advisory linked should be consulted for official update instructions and confirmation of remediation status.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- Chrome
- Date Reserved
- 2026-08-25T06:08:06.191Z
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html","vendor":"Google"}]
Threat ID: 6a8df9c8acd9273b49ac6f71
Added to database: 08/25/2026, 20:23:36 UTC
Last enriched: 09/09/2026, 23:52:28 UTC
Last updated: 10/08/2026, 06:48:19 UTC
Views: 23
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.