CVE-2026-79064: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the Network component of Google Chrome on macOS. An attacker can exploit this by leveraging social engineering to convince a user to install a malicious Chrome extension, which then enables arbitrary code execution outside the browser sandbox. The issue is tracked as CVE-2026-79064 and has a CVSS v3.1 base score of 9.6, indicating critical impact with network attack vector, low attack complexity, no privileges required, user interaction needed, and high impact on confidentiality, integrity, and availability. The vulnerability affects Chrome versions prior to 152.0.7977.65 on Mac. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

Successful exploitation allows remote attackers to execute arbitrary code outside the Chrome sandbox on affected macOS systems. This can lead to full compromise of the affected system, including complete confidentiality, integrity, and availability loss. The attack requires user interaction via social engineering to install a crafted extension.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for current remediation guidance. Users should update to Chrome version 152.0.7977.65 or later once available. Until patched, avoid installing untrusted Chrome extensions and be cautious of social engineering attempts.