CVE-2026-79054: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the Chromecast functionality within Google Chrome versions before 152.0.7977.65. Exploitation requires that the attacker has already compromised the renderer process, after which they can execute arbitrary code outside the browser sandbox by using a specially crafted HTML page. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary code execution outside the sandbox, potentially compromising the host system. The vulnerability affects confidentiality, integrity, and availability of the affected system. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed from the provided data. The vendor advisory link should be consulted for current remediation guidance. Users should update to version 152.0.7977.65 or later once confirmed as fixed by the vendor. Until then, cautious handling of untrusted HTML content and limiting renderer process compromise risk are advisable.