CVE-2026-79197
published 2026-08-25CVE-2026-79197: Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page…
PriorityP353high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.41%
33.8th percentile
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | < 152.0.7977.65 | 152.0.7977.65 | |
| chrome | >= 152.0.7977.65 < 152.0.7977.65 | 152.0.7977.65 | |
| chrome_desktop | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Google Chrome up to 151.0.7922.173 use after free
vuldb·2026-08-26
CVE-2026-79197 [CRITICAL] Google Chrome up to 151.0.7922.173 use after free
A vulnerability described as critical has been identified in Google Chrome. Affected by this vulnerability is an unknown functionality. Such manipulation leads to use after free.
This vulnerability is uniquely identified as CVE-2026-79197. The attack can be launched remotely. No exploit exists.
Upgrading the affected component is recommended.
GHSA
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
ghsa_unreviewed·2026-08-25
CVE-2026-79197 CWE-416 Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.
Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Chrome
Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2026-79197
vendor_chrome·2026-09-08·CVSS 8.8
CVE-2026-79197 [HIGH] Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2026-79197
Stable Channel Update for ChromeOS / ChromeOS Flex
CVE-2026-79197
Chrome
Stable Channel Update for Desktop: CVE-2026-79045
vendor_chrome·2026-08-25
CVE-2026-79045 [LOW] Stable Channel Update for Desktop: CVE-2026-79045
Stable Channel Update for Desktop
CVE-2026-79045: Type confusion in V8. Reported by Google on 2026-07-04 [N/A][ 531297707 ] Low CVE-2026-79197: Use after free in V8
Reported by Google on 2026-07-05 [N/A][ 532303080 ] Low CVE-2026-79148: Off-by-one error in DevTools
Severity: low
No detection rules found.
No public exploits indexed.
2026-08-25
Published