CVE-2026-78964

View on CVE.org
Published Aug 25, 2026 CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed
Description
Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Analysis

AI-generated

Technical impact

Google Chrome on iOS suffers a use‑after‑free flaw in the Sync component that allows a remote attacker to supply a crafted HTML page and potentially execute code outside the browser sandbox. The flaw is a classic memory management bug (CWE‑416) and can lead to full device compromise if executed successfully. The description emphasizes that the impact is limited to code execution but carries significant severity in terms of confidentiality, integrity, and availability of the affected device.

Affected Systems

All users of Google Chrome on iOS with a build prior to 152.0.7977.65 are affected. The bug was present in the Sync feature of the browser and does not apply to non‑iOS platforms or later releases.

Risk and Exploitability

The CVSS score is 9.6 and the EPSS score is unavailable, but the vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be a crafted web page delivered over HTTP/HTTPS. Because the flaw allows execution outside the sandbox, it is a high‑impact vulnerability, yet the overall risk is tempered by the lack of widespread exploitation evidence at this time.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update Chrome to version 152.0.7977.65 or later.
  • If an update cannot be applied immediately, disable the Sync feature to eliminate the code path that leads to the use‑after‑free.
  • Monitor official Google release notes and security advisories for any new workarounds or special instructions.

Generated by OpenCVE AI on August 26, 2026 at 02:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-4771-1 chromium security update
Debian DSA Debian DSA DSA-6482-1 chromium security update
History
Type Values Removed Values Added
First Time appeared Apple
Apple iphone Os
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple iphone Os
Type Values Removed Values Added
Title Use After Free Exploit in Chrome iOS Sync Allows Remote Code Execution
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Title Use After Free Exploit in Chrome iOS Sync Allows Remote Code Execution
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome
Type Values Removed Values Added
Description Use after free in Sync in Google Chrome on on iOS prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Weaknesses CWE-416
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Aug 27, 2026, 3:55 AM
Reserved
Aug 25, 2026, 6:05 AM

View source JSON

Updated
Aug 26, 2026, 12:15 AM

JSON

Status
Analyzed
Published
Aug 25, 2026, 9:17 PM
Modified
Aug 27, 2026, 4:17 AM

View source JSON

No data.

Updated
Aug 26, 2026, 2:45 AM

JSON