CVE-2026-79282: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the ANGLE graphics abstraction layer within Google Chrome on Android. Exploitation requires user interaction (UI:R) and can lead to remote code execution outside the sandbox, compromising system security. The affected versions are those prior to 152.0.7977.65, which is the version that addresses this issue. The CVSS vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required. The vulnerability impacts confidentiality, integrity, and availability at a high level.

Successful exploitation allows a remote attacker to execute arbitrary code outside the sandbox on affected Android devices running vulnerable Chrome versions. This can lead to full compromise of the browser process and potentially the underlying system, affecting confidentiality, integrity, and availability.

The vendor advisory link points to a stable channel update for Chrome, implying that version 152.0.7977.65 includes the fix. Users should update to Chrome version 152.0.7977.65 or later on Android to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory content provided; therefore, users should verify the update details in the official Google Chrome release notes. No additional mitigations are specified.