Exploit for CVE-2026-79266

## https://sploitus.com/exploit?id=AFDA9F51-7126-5DCD-A43F-A2C568EEC62C
# Chrome Vulnerability Scanner

A lightweight, dependency-free **defensive** tool that checks the installed Google Chrome version against known vulnerabilities and produces an easy-to-understand visual HTML report.

Alat pertahanan ringan untuk memeriksa versi Google Chrome terhadap kerentanan yang diketahui, lalu menghasilkan laporan HTML visual yang mudah dipahami.

## Features / Fitur

- **Auto-detect Chrome version** on macOS (or pass it with `--version`)
- **Checks against known CVEs** (extensible vulnerability database)
- **Visual HTML report** with a clear VULNERABLE / SAFE status dashboard
- **Educational Use-After-Free (CWE-416) visualization** — conceptual memory diagram
- **JSON output** for CI / further analysis
- **Bilingual** — Indonesian (`chrome-vuln-checker.py`) and English (`chrome-vuln-checker-en.py`) versions

## Usage / Pemakaian

```bash
# Auto-detect Chrome version and produce HTML report (English)
python3 chrome-vuln-checker-en.py --html report_en.html

# Indonesian version
python3 chrome-vuln-checker.py --html report.html

# Pass version manually + save JSON
python3 chrome-vuln-checker-en.py --version 150.0.7871.125 --json result.json

# Output only to terminal
python3 chrome-vuln-checker-en.py
```

## Example report (screenshot)

![Chrome vulnerability report](chrome-vuln-report-screenshot.png)

## The HTML report includes

- **Status banner** — VULNERABLE (red) or SAFE (green)
- **Summary cards** — installed version, vulnerabilities checked, affected count
- **Vulnerability detail blocks** — CVSS, CWE class, safe version, impact, remediation
- **Use-After-Free educational diagram** — the 4-stage pattern (Allocate → Free → Use → Exploit)

## Important notes / Catatan penting

- **Honest disclaimer about memory addresses:** the specific register/memory addresses for a real exploit are **not published** and depend on the runtime heap layout. The tool shows a **conceptual** memory diagram, not fabricated addresses.
- This tool checks the version against *known* vulnerabilities only. It does not guarantee full security.
- Alat ini hanya memeriksa versi terhadap kerentanan *yang diketahui*. Tidak menjamin keamanan penuh.

## Example: CVE-2026-79266 (Use-After-Free in DevTools)

- **Fixed version:** 152.0.7977.65
- **CVSS:** 8.8 (High)
- **Class:** CWE-416
- **Impact:** arbitrary code execution inside the sandbox via a malicious extension

Chrome versions **below 152.0.7977.65** are vulnerable — update immediately.