CVE-2026-95347

Summary

This flaw involves a use-after-free vulnerability in the Updater component of Google Chrome on Mac versions prior to 154.0.8037.57, allowing remote attackers to execute arbitrary code outside the sandbox via crafted network traffic.

Exploitability

Exploitation is considered moderately difficult, requiring the attacker to craft specific network traffic to trigger the vulnerability.

Blast radius

If exploited, the flaw could result in the execution of arbitrary code, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome version 154.0.8037.57 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.