CVE Catalog
CVE-2026-12442
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.36%
28th percentile — higher than 28% of all known CVEs
Summary
A use after free vulnerability in the Passwords module of Google Chrome on Android prior to version 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page.
Risk Assessment
This vulnerability poses a serious risk to users, allowing attackers to remotely take control of the device through malicious websites.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this critical vulnerability.
Original NVD description (English source)
Use after free in Passwords in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)