CVE-2026-79198: Use after free in Google Chrome

This vulnerability is a use-after-free in the Platform component of Google Chrome versions before 152.0.7977.65. Exploitation requires a user to visit a maliciously crafted HTML page, which can trigger arbitrary code execution inside the browser's sandbox environment. The CVSS 3.1 vector indicates the attack can be performed remotely over the network without privileges and requires user interaction. The impact includes full compromise of confidentiality, integrity, and availability of the affected system within the sandbox context. The vendor advisory linked corresponds to the stable channel update that presumably includes the fix.

Successful exploitation allows remote attackers to execute arbitrary code inside the sandboxed environment of Google Chrome, potentially leading to full compromise of the browser process. This can result in unauthorized access, data manipulation, or denial of service within the sandbox. However, there is no indication of active exploitation in the wild at this time.

Users and administrators should update Google Chrome to version 152.0.7977.65 or later to remediate this vulnerability. The vendor advisory linked confirms the availability of this stable channel update. No additional mitigation steps are specified or required beyond applying the update.