CVE-2026-84347: Use After Free

Q: Which Chrome versions need to be updated?

Google Chrome versions prior to 152.0.7977.75 are affected. Update to 152.0.7977.75 or later.

Q: What must an attacker do to exploit this issue?

An attacker would need to induce a user to load a crafted HTML page. Successful exploitation can execute arbitrary code inside the Chrome sandbox.

Q: Does this vulnerability provide a sandbox escape?

The available information states that code execution occurs inside the sandbox. It does not state that the vulnerability bypasses or escapes the sandbox.

Published Sep 1, 2026

Updated

Use after free in WebRTC in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Google Chrome<152.0.7977.75

Event History

Sep 1, 2026

CVE Published

via MITRE·11:42 PM

Data Sourced

via MITRE·11:42 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome versions need to be updated?

Google Chrome versions prior to 152.0.7977.75 are affected. Update to 152.0.7977.75 or later.

What must an attacker do to exploit this issue?

An attacker would need to induce a user to load a crafted HTML page. Successful exploitation can execute arbitrary code inside the Chrome sandbox.

Does this vulnerability provide a sandbox escape?

The available information states that code execution occurs inside the sandbox. It does not state that the vulnerability bypasses or escapes the sandbox.