CVE-2026-84350: Use After Free

Q: Which Chrome releases need to be remediated?

Google Chrome releases prior to 152.0.7977.75 are affected. Update Chrome to 152.0.7977.75 or later.

Q: What would an attacker need to exploit this issue?

The attacker must remotely induce user interaction through social engineering. Successful exploitation can result in arbitrary code execution outside the Chrome sandbox.

Q: Are systems affected without user involvement?

The available information describes exploitation through UI interaction and social engineering, so user interaction is part of the stated attack scenario.

Published Sep 1, 2026

Updated

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: Low)

Affected Software

1 affected component

Google Chrome<152.0.7977.75

Event History

Sep 1, 2026

CVE Published

via MITRE·11:42 PM

Data Sourced

via MITRE·11:42 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome releases need to be remediated?

Google Chrome releases prior to 152.0.7977.75 are affected. Update Chrome to 152.0.7977.75 or later.

What would an attacker need to exploit this issue?

The attacker must remotely induce user interaction through social engineering. Successful exploitation can result in arbitrary code execution outside the Chrome sandbox.

Are systems affected without user involvement?

The available information describes exploitation through UI interaction and social engineering, so user interaction is part of the stated attack scenario.