CVE-2026-12035
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A use after free vulnerability in Views in Google Chrome on Windows prior to version 149.0.7827.115 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Risk Assessment
This vulnerability poses a high risk to organizations, allowing attackers to remotely take control of the system by exploiting memory corruption.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and reduce the risk of attacks.
Other vulnerabilities in Google Chrome Views
See all- CVE-2026-7976High
In Google Chrome prior to version 148.0.7778.96, a use after free vulnerability in Views allowed an attacker to execute arbitrary code via a malicious extension if a user installed it.
- CVE-2026-7910Critical
A use after free vulnerability in Views in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.
Original NVD description (English source)
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)