cve.nowby Sazabi
← All vulnerabilities
CVE-2026-113270EUVD-2026-105641GHSA-FFR7-6966-C777

Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Fix
Fixed in 156.0.8078.47
Public exploit
None on Exploit-DB

Summary

Use after free in Internals in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Affected versions

  • Google Chrome

    From 156.0.8078.47 · fixed in 156.0.8078.47

References 2

chromereleases.googleblog.com

issues.chromium.org