← Database

CVE-2026-78937

CRITICAL CVSS: 9.6 Published: 2026-08-25 Modified: 2026-08-27

Description

Use after free in Search in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Platforms

Google AndroidGoogle Chrome

Weakness Type

CWE-416

References