CVE-2026-79183: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the Accessibility feature of Google Chrome versions before 152.0.7977.65. Exploitation requires user interaction, typically through social engineering, enabling an attacker to execute arbitrary code outside the sandbox environment. The issue is tracked as CVE-2026-79183 and has been assigned a high severity score of 8.8 according to CVSS v3.1 metrics. No known exploits are reported in the wild at this time. The vendor has published an advisory linked to a stable channel update, indicating a fix is available in version 152.0.7977.65.

Successful exploitation can lead to arbitrary code execution outside the sandbox, compromising the security boundary of the browser. This can result in full system compromise depending on the privileges of the user running Chrome. The attack requires user interaction, typically social engineering, to trigger the vulnerability.

A fixed version is available in Google Chrome 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. The vendor advisory linked confirms the availability of an official fix. No additional mitigations are specified or required beyond applying the update.