PT-2026-46428
CVE-2026-10899
·
Published
2026-05-27
·
Updated
2026-09-11
Description by
CVSS 2.0
7.6
HighMetricsAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Google Chrome on Linux versions prior to 149.0.7827.53
Description
A use after free issue in Ozone allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This occurs when a user is convinced to perform specific UI gestures. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to memory corruption.
Recommendations
Update to version 149.0.7827.53 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾