CVE-2026-11632
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Use after free in TabStrip in Google Chrome prior to version 149.0.7827.103 allows a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows remote code execution, potentially leading to full system compromise.
Recommendation
It is recommended to update Google Chrome to version 149.0.7827.103 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Use after free in TabStrip in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)