Use After Free Vulnerability in FullScreen Feature of Google Chrome
CVE-2026-102309

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
29 September 2026

What is CVE-2026-102309?

A use after free vulnerability in the FullScreen feature of Google Chrome prior to version 154.0.8037.92 could allow attackers to execute arbitrary code outside the sandbox, potentially leading to malicious actions if a user visits a specially crafted HTML page. This security flaw emphasizes the importance of keeping browser software updated to protect against exploits that leverage such vulnerabilities.

Affected Version(s)

Chrome 154.0.8037.92

References

https://chromereleases.googleblog.com/2026/09/stable-chan...
https://issues.chromium.org/issues/560867085

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.