CVE-2026-12011

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.115

Description A use after free issue exists in WebMIDI. This allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by using a crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Recommendations Update to version 149.0.7827.115 or later.