PT-2026-46435 · Google · Google Chrome

·

CVE-2026-10906

·

Published

2026-04-17

·

Updated

2026-08-31

CVSS v2.0

7.6

High

VectorAV:N/AC:H/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53
Description A use after free issue exists in WebAuthentication. A remote attacker can potentially exploit heap corruption—a condition where memory allocation on the heap is corrupted—via a crafted HTML page, provided they can convince a user to perform specific UI gestures.
Recommendations Update to version 149.0.7827.53 or later.

Fix

DoS

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12910
CVE-2026-10906
ECHO-FDA6-D871-8F36
OPENSUSE-SU-2026:10958-1
OPENSUSE-SU-2026:21135-1

Affected Products

Google Chrome