Use After Free Vulnerability in Google Chrome Payments

CVE-2026-15117

What is CVE-2026-15117?

A use after free vulnerability was discovered in the Payments component of Google Chrome, allowing remote attackers to exploit heap corruption by convincing users to perform specific UI gestures on a specially crafted HTML page. This flaw could lead to unexpected behavior and potentially permit unauthorized actions within the browser.

References