EUVD-2026-79976
GHSA-79c6-6hc6-xmgh
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Remote crafted page needs user to visit it (UI:R), no auth (PR:N); UAF escapes the sandbox so S:C with full host compromise (C:H/I:H/A:H).
Primary rating from Vendor (google).
CVSS VectorVendor: google
Lifecycle Timeline
5DescriptionCVE.org
Use after free in WebAppInstalls in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
Use-after-free in Google Chrome's WebAppInstalls component allows a remote, unauthenticated attacker to execute arbitrary code outside the browser sandbox when a victim loads a crafted HTML page on any build prior to 153.0.8010.47. Exploitation requires user interaction (CVSS 3.1 vector AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, score 9.6), and the scope-changed rating reflects that a successful attack escapes the renderer sandbox and reaches the host rather than staying contained in the browser process. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to visit or be redirected to an attacker-controlled crafted HTML page using a vulnerable Chrome build prior to 153.0.8010.47 (UI:R user interaction is the primary limiting factor). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-priority vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade to Google Chrome 153.0.8010.47 or later - vendor-released patch: 153.0.8010.47, distributed through the stable-channel update described at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all systems running Google Chrome versions prior to 153.0.8010.47 and force-update them to 153.0.8010.47 or later, verifying successful installation and prioritizing high-risk users and endpoints. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Use-after-free in the Workers component of Google Chrome allows an unauthenticated remote attacker to execute arbitrary
Remote code execution inside the renderer sandbox can be triggered in unpatched Google Chrome builds by a use-after-free
Use after free in ANGLE in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap c
The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which all
Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.91 allow attackers to cause a denial of service o
Multiple unspecified vulnerabilities in Google V8 before 3.30.33.15, as used in Google Chrome before 40.0.2214.91, allow
The SelectionOwner::ProcessTarget function in ui/base/x/selection_owner.cc in the UI implementation in Google Chrome bef
Skia, as used in Google Chrome before 40.0.2214.91, allows remote attackers to cause a denial of service (out-of-bounds
Google Chrome before 40.0.2214.91, when the Harmony proxy in Google V8 is enabled, allows remote attackers to bypass the
Same weakness CWE-416 – Use After Free
View allShare
External POC / Exploit Code
Leaving vuln.today