Zero Day MonitorZDM

← Back to list

9.6

CVE-2026-84353PATCHED

google · chrome

CVE-2026-84353: Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leve

Description

Use after free in Shared Tab Groups in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected Products

Vendor	Product	Versions
google	chrome	152.0.7977.75

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
google	chrome	cert_advisory	90%

References

Related News (6 articles)

Tier B

CERT-FR16h ago

Multiples vulnérabilités dans Microsoft Edge (04 septembre 2026)

→ No new info (linked only)

Tier A

Microsoft MSRC16h ago

Chromium: CVE-2026-84353 Use after free in Shared Tab Groups

→ No new info (linked only)

Tier B

BSI Advisories2d ago

[NEU] [hoch] Google Chrome: Mehrere Schwachstellen

→ No new info (linked only)

Tier D

SecurityWeek2d ago

Chrome and Firefox Updates Patch Dozens of Vulnerabilities

→ No new info (linked only)

Tier C

VulDB2d ago

CVE-2026-84353 | Google Chrome up to 152.0.7977.65 Shared Tab Groups use after free

→ No new info (linked only)

Tier B

CERT-FR2d ago

Multiples vulnérabilités dans Google Chrome (02 septembre 2026)

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.6 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

152.0.7977.75

CWECWE-416

PublishedSep 1, 2026

Trending Score55

Source articles6

Independent5

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-85046EXPKEV

CVE-2026-85046: Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside

HIGHCVE-2026-11645EXP

CVE-2026-11645: Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitra

CRITICALCVE-2026-84325

CVE-2026-84325: Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging s

CRITICALCVE-2026-85050

CVE-2026-85050: Out of bounds write in WebGL in Google Chrome on on Android prior to 152.0.7977.82 allowed a remote attacker to execute

CRITICALCVE-2026-84324

CVE-2026-84324: Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outs

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 1, 2026

Discovered by ZDM

Sep 2, 2026

Patch Available

Sep 3, 2026