PT-2026-46480

CVE-2026-10951

Published

2026-06-04

Updated

2026-08-31

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 149.0.7827.53

Description A use after free issue in the Autofill component allows a remote attacker to potentially exploit heap corruption. This occurs when a user is convinced to perform specific UI gestures on a crafted HTML page. Use after free is a memory corruption flaw where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Update to version 149.0.7827.53 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers

CVE-2026-10951

ECHO-7CBE-2A2D-1752

OPENSUSE-SU-2026:10958-1