PT-2026-132888

CVE-2026-76031

Published

2026-10-29

Updated

2026-11-01

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.79

Description A use after free issue exists in the Input component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a crafted HTML page, allowing the execution of arbitrary code within the sandbox.

Recommendations Update Google Chrome to version 156.0.8078.79 or later.

Exploitability

Fix

Impacts

Researchers

Arni Hardarson

Neonix Security

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

CWE-863: Incorrect Authorization