CVE-2026-6317

High

Published: 15/04/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

In Google Chrome prior to version 147.0.7727.101, there was a use after free vulnerability in the Cast component that allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Risk Assessment

This vulnerability poses a high risk to organizations, allowing attackers to remotely take control of the user's system.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Other vulnerabilities in Google Chrome (Cast component)

CVE-2023-4075High
A use after free vulnerability in the Cast component of Google Chrome prior to version 115.0.5790.170 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Original NVD description (English source)

Use after free in Cast in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)