PT-2026-81669 · Google · Google Chrome
CVSS v3.1
9.6
Critical
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 152.0.7977.65
Description
A use after free issue exists in the FedCM (Federated Credential Management) component. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page.
Recommendations
Update Google Chrome to version 152.0.7977.65 or later.
Fix
DoS
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Google Chrome