Use After Free Vulnerability in Google Chrome Extensions

CVE-2026-12445

What is CVE-2026-12445?

A use after free vulnerability exists in the Extensions component of Google Chrome prior to version 149.0.7827.155. This flaw allows an attacker to exploit heap corruption by persuading a user to install a malicious extension. If exploited, this vulnerability could facilitate unauthorized access or control over sensitive user data and system resources, highlighting the importance of securing browser environments against potential threats.

References