CVE-2026-79275: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the ANGLE graphics component of Google Chrome versions before 152.0.7977.65. Exploitation requires user interaction (UI:R) and can lead to remote code execution with high impact on confidentiality, integrity, and availability. The flaw allows an attacker to bypass sandbox protections and execute arbitrary code by delivering a specially crafted HTML page. The vulnerability has a CVSS 3.1 base score of 9.6, indicating critical severity. Google has released a stable channel update to fix this issue, as referenced in their official advisory.

Successful exploitation can lead to arbitrary code execution outside the sandbox, compromising the security boundaries of the browser. This can result in full system compromise, including complete loss of confidentiality, integrity, and availability of the affected system. No active exploitation has been reported, but the high CVSS score reflects the critical nature of the vulnerability.

A fix is available in Google Chrome version 152.0.7977.65. Users and administrators should update to this version or later to remediate the vulnerability. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html for detailed update instructions.