CVE record · 2 sources
CVE-2026-102324
CVSS 8.3Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to…
- Vendor
- Product
- chrome, chromium
- CVSS
- 8.3
- EPSS
- 0.002 (p15)
- Exposure class
- Operating system, Browser
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Long Term Support Channel Update for ChromeOS
A new LTC version 150.0.7871.256 (Platform Version: 16700.66.0 ), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 533502257 High CVE-2026-85043 Incomplete cleanup in Network…
-
Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to…
Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page.…
-
Stable Channel Update for Desktop
The Stable channel has been updated to 154.0.8037.92/.93 for Windows and Mac and 154.0.8037.92 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes…