Use After Free Vulnerability in Google Chrome Extensions

CVE-2026-19558

What is CVE-2026-19558?

A use after free vulnerability exists in Google Chrome's extension handling, which allows attackers to execute arbitrary code when users are convinced to install malicious extensions. This issue occurs when the memory for an extension is mismanaged, leading to potential exploitation within the browser's sandbox environment. Users are encouraged to update to the latest version of Google Chrome to mitigate the risks associated with this vulnerability.

References