EUVD-2026-65771
GHSA-8gp5-4955-5wrr
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Remote crafted page with no auth (AV:N/PR:N) but victim must open it (UI:R); sandbox escape crosses a trust boundary (S:C) giving full host compromise (C/I/A:H).
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
Sandbox-escaping remote code execution in Google Chrome (Views UI component) before 152.0.7977.65 allows a remote attacker to run arbitrary code on the host after luring a victim to a crafted HTML page. The flaw is a CWE-416 use-after-free rated High by Chromium and CVSS 9.6 due to the scope change (sandbox escape), but requires user interaction (visiting an attacker-controlled page) and has no public exploit identified at time of analysis. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires user interaction (CVSS UI:R): the victim must be socially engineered into visiting an attacker-controlled crafted HTML page in a vulnerable Chrome build older than 152.0.7977.65 - no authentication or prior privileges are needed (PR:N). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed and should temper the raw 9.6. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts a malicious HTML page that triggers the Views use-after-free and hosts it on a lookalike or compromised site, then uses phishing or a malvertising lure to get a victim to open it in a vulnerable Chrome build. When the page loads, the dangling pointer is reclaimed with attacker-controlled data, and control-flow hijack in the browser process yields arbitrary code execution outside the renderer sandbox. … |
| Remediation | Vendor-released patch: 152.0.7977.65 - update Google Chrome to 152.0.7977.65 or later via Chrome's built-in updater (chrome://settings/help) and relaunch to complete the update, then confirm the same baseline across Chromium-derived browsers as their vendors ship equivalent builds. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, notify your user base that critical Chrome updates are available and updates should be applied immediately; verify your automated update systems are functioning. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-416 – Use After Free
View allSame technique Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today