CVE-2026-12451

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155

Description A use-after-free issue exists in DigitalCredentials. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker who has already compromised the renderer process can exploit this by using a crafted HTML page to potentially achieve a sandbox escape, allowing code execution outside the restricted browser environment.

Recommendations Update Google Chrome to version 149.0.7827.155 or later.