CVE-2026-79257: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the Views component of Google Chrome before version 152.0.7977.65. Exploitation requires user interaction (visiting a malicious HTML page) and can lead to remote code execution outside the sandbox, compromising system security. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability. The vendor advisory confirms the issue and provides a fixed version in the stable channel update.

Successful exploitation enables remote attackers to execute arbitrary code outside the sandbox, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the affected system. No active exploitation in the wild has been reported so far.

A fixed version of Google Chrome is available in the stable channel update referenced by the vendor advisory. Users and administrators should update to version 152.0.7977.65 or later to remediate this vulnerability. Patch status is confirmed by the vendor advisory. No additional mitigation steps are specified.