EUVD-2026-65811
GHSA-c8v3-xpmq-f63m
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Web-delivered UAF reachable unauthenticated (AV:N/PR:N) with low complexity but requiring the victim to open a page (UI:R); sandbox escape yields S:C and full C/I/A impact.
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
Remote code execution in Google Chrome's ANGLE graphics component (versions prior to 152.0.7977.65) lets a remote attacker escape the browser sandbox and run arbitrary code by luring a victim to a crafted HTML page. The flaw is a use-after-free (CWE-416) rated 9.6/Critical with a scope change, meaning exploitation impacts the host beyond the compromised renderer. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to actively load attacker-controlled HTML/WebGL content in a vulnerable Chrome build below 152.0.7977.65 - the UI:R metric means user interaction (navigating to or opening the crafted page) is mandatory, which is the primary limiting factor. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are partly divergent and must be weighed together. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts or compromises a web page containing crafted WebGL/graphics content and entices a victim on a vulnerable Chrome build to visit it (via phishing link, malvertising, or watering hole). Rendering the page triggers the use-after-free in ANGLE, and by grooming freed memory the attacker achieves code execution that escapes the renderer sandbox into a more privileged context. … |
| Remediation | Vendor-released patch: 152.0.7977.65 - upgrade Google Chrome to 152.0.7977.65 or later on all desktop platforms and restart the browser to load the fix, per Google's Chrome Releases advisory (https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Issue critical security alert to all Chrome users indicating the vulnerability and available patch, with instructions to update immediately. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-416 – Use After Free
View allSame technique Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today