Use After Free Vulnerability in DigitalCredentials of Google Chrome
CVE-2026-91729

Currently unrated

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
15 September 2026

What is CVE-2026-91729?

A use after free vulnerability in the DigitalCredentials component of Google Chrome prior to version 153.0.8010.47 allows remote attackers to leverage social engineering techniques to craft a malicious HTML page. Successfully exploiting this vulnerability can enable attackers to execute arbitrary code outside of Chrome's sandbox environment, posing a significant security risk to users.

Affected Version(s)

Chrome 153.0.8010.47

References

https://chromereleases.googleblog.com/2026/09/stable-chan...
https://issues.chromium.org/issues/557206809

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.