CVE-2026-76040: Use After Free

Q: Which systems are affected?

The affected product is Google Chrome on Mac, with versions prior to 151.0.7922.169 identified as vulnerable. The issue is described as a browser use-after-free vulnerability with Chromium severity rated High.

Q: What does an attacker need to exploit this issue?

A remote attacker needs to persuade a user to interact with a crafted HTML page. Successful exploitation can result in arbitrary code execution outside Chrome’s sandbox.

Q: What is the recommended remediation?

Update Google Chrome on Mac to version 151.0.7922.169 or later. The provided data does not identify an alternative mitigation for environments where updating cannot be performed immediately.

Published Aug 18, 2026

Updated

Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<151.0.7922.169

Event History

Aug 18, 2026

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionWeakness

Frequently Asked Questions

Which systems are affected?

The affected product is Google Chrome on Mac, with versions prior to 151.0.7922.169 identified as vulnerable. The issue is described as a browser use-after-free vulnerability with Chromium severity rated High.

What does an attacker need to exploit this issue?

A remote attacker needs to persuade a user to interact with a crafted HTML page. Successful exploitation can result in arbitrary code execution outside Chrome’s sandbox.

What is the recommended remediation?

Update Google Chrome on Mac to version 151.0.7922.169 or later. The provided data does not identify an alternative mitigation for environments where updating cannot be performed immediately.