CVE record · 2 sources
CVE-2026-103630
Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted…
- Vendor
- Product
- chrome, chromium
- EPSS
- 0.002 (p15)
- Exposure class
- Operating system, Browser
Coverage
2Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Long Term Support Channel Update for ChromeOS
A new LTC version 150.0.7871.256 (Platform Version: 16700.66.0 ), is being rolled out for most ChromeOS devices. This version includes selected security fixes including: 533502257 High CVE-2026-85043 Incomplete cleanup in Network…
-
Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted…
Use after free in FedCM in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)