CVE-2026-79247: Use after free in Google Chrome

CVE-2026-79247 is a use-after-free vulnerability in the Chromoting feature of Google Chrome on Windows platforms before version 152.0.7977.65. An attacker who has already compromised the renderer process can exploit this vulnerability by sending crafted network traffic, enabling arbitrary code execution outside the browser sandbox. This elevates the attacker's capabilities beyond the renderer process sandbox restrictions. The vulnerability has a CVSS v3.1 base score of 8.3, indicating high severity. There are no known exploits in the wild at the time of publication. The vendor has published an advisory indicating a stable channel update for desktop Chrome that addresses this issue.

Successful exploitation allows remote code execution outside the sandbox, which can lead to full compromise of the affected system. The attacker must have already compromised the renderer process to leverage this vulnerability. The impact includes complete confidentiality, integrity, and availability loss on the targeted system.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for details and update instructions.