Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.6

Google Chrome Android before 152 can run malicious code

CVE-2026-84353 · published 1 day ago
Summary

Chrome on Android versions older than 152 may let a specially crafted web page run unauthorized code on the device. This can happen if a user is tricked into opening a malicious page, potentially bypassing Chrome's security barriers. Update Chrome to the latest version to protect your device.

What to do
  • Update google chrome to version 152.0.7977.75 or later.
Affected software
VendorProductAffected versions
google chrome < 152.0.7977.75
Original advisory text
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a...
Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
References
Severity
9.6 Critical
Exploitation
EPSS <1%
Type
CWE-416Use After Free
Timeline
Published2 Sep 2026
Updated2 Sep 2026
First seen2 Sep 2026
Sources
CVE-2026-84353 · NVD
CVE-2026-84353 · MITRE
Monitor software like this
Free during beta