Use After Free Vulnerability in Google Chrome Affecting Renderer Process
CVE-2026-15774

8.3HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
14 July 2026

What is CVE-2026-15774?

A use after free vulnerability was identified in the Skia library used by Google Chrome, affecting versions prior to 150.0.7871.125. This flaw could allow remote attackers who have compromised the renderer process to execute potentially malicious actions via specially crafted HTML pages. If exploited, this vulnerability poses risks of unauthorized access and may lead to a sandbox escape, thereby compromising the security of the browser environment.

Affected Version(s)

Chrome 150.0.7871.125

References

https://chromereleases.googleblog.com/2026/07/stable-chan...
https://issues.chromium.org/issues/530646115

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.