Security readout for executives and security teams
Plain-English summary
A critical memory-safety flaw in Google Chrome for Mac could let an attacker take control after persuading a user to open a crafted web page. Successful exploitation can execute code outside Chrome’s sandbox, potentially exposing data, altering systems, or disrupting operations. Chrome versions earlier than 152.0.7977.65 are affected.
Executive priority
Treat this as an immediate browser-patching priority. The combination of remote delivery, low attack complexity, sandbox escape, and potential full confidentiality, integrity, and availability impact creates substantial business risk despite required user interaction. Confirm fleet-wide Mac remediation promptly and track exceptions to closure.
Technical view
CVE-2026-79012 is a CWE-416 use-after-free vulnerability in Chrome’s Safe Browsing component on Mac. A remote, unauthenticated attacker can use a crafted HTML page, but user interaction through social engineering is required. The reported CVSS 3.1 score is 9.6, with possible high confidentiality, integrity, and availability impact across a security boundary.
Likely exposure
Mac endpoints running Chrome versions earlier than 152.0.7977.65 are likely exposed, particularly where users can browse external or untrusted sites. The supplied sources do not identify other operating systems or Chromium-based products as affected, so their exposure should not be assumed.
Exploitation context
Exploitation requires a targeted user to interact with a crafted HTML page through social engineering. The supplied record says successful exploitation can execute arbitrary code outside the sandbox. The bundle marks KEV as false and provides no other evidence of active exploitation; real-world exploitation is therefore not established here.
Researcher notes
The public description identifies a Safe Browsing use-after-free and crafted HTML trigger but provides no root-cause detail, exploit indicators, or technical patch analysis. The Chromium issue may contain restricted information. Version scope should follow the explicit wording: Chrome on Mac prior to 152.0.7977.65.
Mitigation direction
- Update Chrome on Mac to version 152.0.7977.65 or later.
- Prioritize managed updates for privileged users and internet-facing business functions.
- Restrict unpatched endpoints from accessing untrusted websites where operationally feasible.
- Review Google’s release notice for additional vendor guidance or revised information.
Validation and detection
- Inventory Chrome versions across all managed Mac endpoints.
- Confirm no Mac device remains below version 152.0.7977.65.
- Verify browser management reports successful installation and restart completion.
- Recheck the Chrome release notice and CVE record for subsequent updates.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-416: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2026-79012 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Critical
- CVSS
- 9.6 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H2.86CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
9.6CriticalVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0256176589.htmlCVE reference, Chrome
- https://issues.chromium.org/issues/523704817CVE reference, Chrome
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Use After Free
Use After Free represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.