CVE-2026-84350: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the TabStrip of Google Chrome before version 152.0.7977.75. Exploitation requires user interaction, typically through social engineering, to trigger arbitrary code execution outside the browser sandbox. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to arbitrary code execution outside the sandbox, potentially compromising the affected system's confidentiality, integrity, and availability. The attack requires user interaction, reducing the likelihood of automated exploitation. No active exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop.html for current remediation guidance. Users and administrators should monitor this advisory for updates and apply any official fixes once available. Until then, exercising caution with untrusted content and social engineering attempts is advised.