PT-2026-56626

CVE-2026-15107

Published

2026-04-17

Updated

2026-09-09

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115

Description A use after free issue exists in IndexedDB, a low-level API for client-side storage of significant amounts of structured data. This flaw allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to visit a specially crafted HTML page.

Recommendations Update Google Chrome to version 150.0.7871.115 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers

CVE-2026-15107

BDU:2026-13612

ECHO-01FD-5420-1F34