Use After Free Vulnerability in DigitalCredentials of Google Chrome

CVE-2026-12440

What is CVE-2026-12440?

A vulnerability exists in the DigitalCredentials component of Google Chrome on Windows, allowing remote attackers to potentially execute a sandbox escape. This is achieved through the manipulation of crafted HTML pages, which can exploit the use-after-free scenario, leading to unexpected behavior and potential unauthorized access to sensitive data or system resources.

References