CVE-2026-79047: Use after free in Google Chrome

CVE-2026-79047 is a use-after-free vulnerability in the Views component of Google Chrome versions before 152.0.7977.65. Exploitation requires user interaction via social engineering to visit a maliciously crafted HTML page, which can lead to arbitrary code execution outside the browser sandbox. The vulnerability is rated critical with a CVSS 3.1 score of 9.6, reflecting network attack vector, low attack complexity, no privileges required, user interaction needed, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory is available but does not explicitly confirm patch availability or remediation level in the provided data.

Successful exploitation allows remote attackers to execute arbitrary code outside the sandbox, potentially compromising the affected system's confidentiality, integrity, and availability. The attack requires user interaction and social engineering to lure the victim to a crafted HTML page.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Until a patch is confirmed, users should exercise caution when interacting with untrusted web content and avoid clicking on suspicious links.