CVE-2026-84349: Use after free in Google Chrome

This vulnerability is a use-after-free (CWE-416) flaw in Google Chrome's Browser component affecting versions prior to 152.0.7977.75. Exploitation requires that the attacker has already compromised the renderer process and can trigger arbitrary code execution outside the sandbox via a crafted HTML page. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, scope changed, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an attacker with control over the renderer process to execute arbitrary code outside the sandbox, potentially leading to full compromise of the affected system. This can result in complete loss of confidentiality, integrity, and availability of the targeted environment.

A fixed version is available: Google Chrome 152.0.7977.75 addresses this vulnerability. Users and administrators should update to this version or later to remediate the issue. There is no indication that the vulnerability is mitigated by other means or that no action is required.