CVE-2026-12441
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk20th percentile — higher than 20% of all known CVEs
Summary
A use after free vulnerability in the File Input component of Google Chrome on Linux prior to version 149.0.7827.155 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Risk Assessment
This vulnerability has a critical severity level, meaning it could lead to serious security breaches, including the potential takeover of the system by an attacker.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and reduce the risk of attacks.
Original NVD description (English source)
Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)