CVE-2026-85042: Use after free in DevTools
Published Aug 26, 2026
·Updated
Use after free in DevTools in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Credit
Google
Affected Software
2 affected componentsFixes available
Google Chrome<152.0.7977.82
Google Chrome<152.0.7977.82
152.0.7977.82
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.7977.82
Event History
Aug 26, 2026
CVE Published
12:00 AM
Data Sourced
12:00 AM
SeverityWeaknessAffected Software
Sep 3, 2026
CVE Published
via MITRE·07:26 PM
Data Sourced
via MITRE·07:26 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
Which Chrome versions require remediation?
Google Chrome versions earlier than 152.0.7977.82 are affected. Update to 152.0.7977.82 or later.
2
What does exploitation require from an attacker?
A remote attacker would need to use a crafted HTML page. Successful exploitation could result in arbitrary code execution outside the sandbox.