CVE-2026-79052: Use after free in Google Chrome

This vulnerability is a use-after-free in the Aura subsystem of Google Chrome versions before 152.0.7977.65. Exploitation requires user interaction (visiting a malicious HTML page) and can lead to arbitrary code execution outside the sandbox, which compromises browser security boundaries. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The issue is publicly disclosed with a vendor advisory providing a fixed version.

Successful exploitation allows remote attackers to execute arbitrary code outside the sandbox, potentially leading to full compromise of the affected system's user context. This impacts confidentiality, integrity, and availability of the system running the vulnerable Chrome version.

Users and administrators should update Google Chrome to version 152.0.7977.65 or later, as this version contains the fix for the vulnerability. The vendor advisory confirms the availability of a stable channel update addressing this issue. No additional mitigations are indicated.