Use After Free Vulnerability in Google Chrome for Android

CVE-2026-12442

What is CVE-2026-12442?

This vulnerability arises from improper memory management within Google Chrome on Android, specifically due to a use after free condition in the Passwords component. An attacker can exploit this flaw by crafting a malicious HTML page that, when visited by a user, can lead to arbitrary code execution. This can allow the attacker to gain unauthorized access to sensitive data or perform actions on behalf of the user without their consent.

References