CVE record · 3 sources
CVE-2026-106268
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
- Vendor
- Product
- chrome, chromium
- EPSS
- 0.004 (p33)
- Exposure class
- Browser, Operating system, Mobile OS
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Chromium CVE-2026-106268: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2026) for more information.
-
Stable Channel Update for ChromeOS / ChromeOS Flex
M-156, ChromeOS version 16836.19.0 (Browser version 156.0.8078.42) has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: File a bug Visit our ChromeOS…
-
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted…
Use after free in WebRTC in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)