EUVD-2026-65813
GHSA-mmx3-85xp-chw9
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Network-reachable and low-complexity but requires the victim to install a crafted extension (UI:R); sandbox escape yields a scope change (S:C) with full code-execution impact (C:H/I:H/A:H).
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Use after free in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)
AnalysisAI
Sandbox-escaping remote code execution affects Google Chrome desktop versions prior to 152.0.7977.65, where a use-after-free flaw in the Extensions component lets a remote attacker who convinces a victim to install a crafted extension execute arbitrary code outside the renderer sandbox. Chromium rates the severity High and CVSS scores it 9.6 due to the scope change (sandbox escape) and full confidentiality, integrity, and availability impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to be socially engineered into installing a specific attacker-crafted Chrome extension - the CVSS UI:R metric and the description's "leveraging social engineering ... … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are mixed and should be weighed together rather than read off the 9.6 CVSS alone. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker publishes or distributes a crafted Chrome extension and lures a targeted user - via a phishing page, fake tool, or social-engineering pretext - into installing it. Once loaded, the extension triggers the use-after-free in the Extensions component to corrupt memory and execute code outside the browser sandbox, giving the attacker code execution on the host. … |
| Remediation | Vendor-released patch: update Google Chrome to version 152.0.7977.65 or later on all desktop platforms, per the Chrome Stable channel advisory (https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.html); restart the browser to ensure the pending update is applied, since Chrome staged auto-updates only take effect after a relaunch. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory Chrome versions across all endpoints and alert users to avoid installing extensions from untrusted sources until patched. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-416 – Use After Free
View allSame technique Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today