CVE Catalog
CVE-2026-12449
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.13%
3th percentile — higher than 3% of all known CVEs
Summary
Use after free in Chromoting in Google Chrome on Windows prior to version 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation via a malicious file.
Risk Assessment
An attacker could gain elevated privileges on the system, posing a significant security risk to the organization.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)