CVE-2026-84333 Google CVE debrief

Who should care

Defenders responsible for managing Google Chrome on Android devices should assess exposure and prioritize updates to mitigate this vulnerability.

Why it matters

CVE-2026-84333 is a critical use-after-free vulnerability in Google Chrome on Android that could allow remote code execution. Defenders should prioritize updates to mitigate this vulnerability.

• Remote code execution outside the sandbox
• Potential for arbitrary code execution
• Requires immediate attention for Android device users

Technical summary

The vulnerability is a use-after-free issue in Dawn within Google Chrome on Android. This could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The CVSS score is 9.6, indicating a critical severity. The vulnerability affects Google Chrome on Android prior to version 152.0.7977.75. Defenders should prioritize updating Google Chrome to version 152.0.7977.75 or later on Android devices to mitigate this vulnerability.

Defensive priority

Defenders should prioritize updating Google Chrome to version 152.0.7977.75 or later on Android devices to mitigate this vulnerability.

Recommended defensive actions

• Update Google Chrome to version 152.0.7977.75 or later on Android devices
• Review and monitor Google Chrome updates for Android
• Assess exposure of Google Chrome on Android in your organization's inventory

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability, including its CVSS score and severity. However, further analysis is required to determine the full scope of affected systems and potential impact.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.