CVE Catalog
CVE-2026-15901
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.29%
21th percentile - higher than 21% of all known CVEs
Summary
Use-after-free vulnerability in the Network component in Google Chrome prior to 150.0.7871.128. A remote attacker can exploit a crafted HTML page to potentially corrupt heap memory (critical severity).
Risk Assessment
Risk of remote code execution within the browser context, potentially leading to system compromise.
Recommendation
Update Google Chrome to version 150.0.7871.128 or later. Notify users to apply the update.
Original NVD description (English source)
Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)