CVE-2026-79224: Use after free in Google Chrome

This vulnerability is a use-after-free in the Chromecast feature of Google Chrome before version 152.0.7977.65. Exploitation requires that the attacker has already compromised the renderer process, after which they can execute arbitrary code outside the sandbox via a crafted HTML page. The vulnerability has a CVSS 3.1 score of 8.3, reflecting network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor has released a stable channel update to fix this issue.

Successful exploitation allows remote code execution outside the sandbox, enabling an attacker to run arbitrary code on the affected system. This can lead to full compromise of the user's environment. The vulnerability requires user interaction and prior compromise of the renderer process, but the impact on confidentiality, integrity, and availability is high.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for details.