CVE-2026-12445
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk10th percentile — higher than 10% of all known CVEs
Summary
A use after free vulnerability in Extensions in Google Chrome prior to version 149.0.7827.155 allowed an attacker to exploit heap corruption via a malicious extension if a user installed it.
Risk Assessment
An attacker could leverage this vulnerability to gain control over the user's system, posing a significant threat to data security.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to avoid installing unknown extensions.
Original NVD description (English source)
Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)