PT-2026-50217

CVE-2026-12467

Published

2026-06-05

Updated

2026-08-31

Description by

CVSS 3.1

8.3

High

MetricsAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155

Description A use after free issue in Extensions allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A use after free occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Update to version 149.0.7827.155 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers

CVE-2026-12467

BDU:2026-13222

ECHO-A070-BFEC-D9CD