CVE-2026-85042: Use after free in Google Chrome

This vulnerability involves a use-after-free condition in the DevTools feature of Google Chrome versions before 152.0.7977.82. Exploitation requires user interaction (UI:R) and network attack vector (AV:N). Successful exploitation could lead to remote code execution outside the sandbox, compromising system security. The CVSS vector indicates low attack complexity and no privileges required, making it a critical security issue. The vendor has published an advisory but has not explicitly stated the remediation level or patch availability in the provided data.

An attacker can execute arbitrary code remotely outside the sandbox by convincing a user to open a maliciously crafted HTML page. This could lead to full system compromise, including unauthorized access, data theft, or system disruption. The vulnerability affects confidentiality, integrity, and availability at a critical level.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and update to version 152.0.7977.82 or later once confirmed patched. Until then, caution is advised when browsing untrusted content.