CVE-2026-10952

HighCVSS 8.8

Published: 04/06/2026(UTC)Updated: 08/06/2026(UTC)Translated: 09/06/2026(UTC)NVD NIST

Summary

A use after free vulnerability in Chrome for iOS prior to version 149.0.7827.53 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Risk Assessment

This vulnerability could lead to serious security issues, including remote code execution by an attacker.

Recommendation

It is recommended to update Chrome on iOS to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Use after free in Chrome for iOS in Google Chrome on iOS prior to 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)