CVE-2026-79012

CVE-2026-79012 is a use-after-free (CWE-416) in the Safebrowsing component of Google Chrome on macOS. An attacker must socially engineer a user into opening a crafted HTML page, after which the memory-corruption flaw can be triggered in the browser process. If successfully exploited, the attacker gains arbitrary code execution outside of Chrome's sandbox, meaning code runs with the privileges of the browser rather than being confined to a sandboxed renderer. Only Chrome users on Mac running versions prior to 152.0.7977.65 are affected; Chrome on other platforms is not named in the advisory. Exploitation has not yet been observed: the flaw is not in CISA's KEV, no public proof-of-concept is known, and EPSS estimates only a 0.5% chance of exploitation within 30 days.

What to do: Update Google Chrome on macOS to version 152.0.7977.65 or later via chrome://settings/help or your software-management tooling, and verify the running version afterward. Because exploitation requires user interaction, treat unsolicited links and unfamiliar web pages with caution until fleet patching is complete, and prioritize patching users who browse untrusted sites.