Use After Free Vulnerability in Google Chrome Extensions

CVE-2026-12467

What is CVE-2026-12467?

A use after free vulnerability has been discovered in Google Chrome Extensions, affecting versions prior to 149.0.7827.155. This flaw allows a remote attacker who gains control over the renderer process to potentially execute a sandbox escape by leveraging a specially crafted HTML page. It emphasizes the importance of keeping your browser updated to mitigate potential security risks associated with compromised extensions.

References