CVE-2026-84324: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the Proxy module of Google Chrome versions before 152.0.7977.75. Exploitation requires an attacker to send specially crafted network traffic, which can lead to arbitrary code execution outside the sandbox environment. The CVSS v3.1 base score is 9.0, indicating high impact on confidentiality, integrity, and availability. The vendor advisory linked is a stable channel update announcement but does not explicitly state whether this specific vulnerability is patched in that release.

Successful exploitation could allow remote attackers to execute arbitrary code outside the sandbox, compromising the security boundaries of the browser. This can lead to full system compromise depending on the privileges of the Chrome process.

The vendor advisory linked corresponds to a stable channel update for Chrome desktop. Although it does not explicitly confirm patching of CVE-2026-84324, the vulnerability description states it affects versions prior to 152.0.7977.75, implying that updating to version 152.0.7977.75 or later mitigates the issue. Users should update their Chrome browsers to version 152.0.7977.75 or later to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory; users should monitor official Google Chrome release notes for confirmation.