CVE-2026-15773
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk18th percentile - higher than 18% of all known CVEs
Summary
A Use-After-Free vulnerability in the Core component of Google Chrome on Windows prior to version 150.0.7871.125 was discovered. A remote attacker could exploit a crafted HTML page to potentially escape the browser sandbox.
Risk Assessment
Successful exploitation could allow an attacker to break out of the browser's sandbox and gain access to the underlying operating system, posing a critical security risk to the organization.
Recommendation
Immediately update Google Chrome to version 150.0.7871.125 or later on all Windows systems. Consider enabling automatic browser updates.
Original NVD description (English source)
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)