Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execut…

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

Use after free in Compositing in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Etkilenen sürümler1 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• chromereleases.googleblog.com/…ble-channel-update-for-desktop_0562499947.html Diğer
• issues.chromium.org/issues/574382050 Diğer

Kayıt geçmişi

1. 28 Eki 2026 16:20CVSS puanı değişti: – → 8.8
2. 28 Eki 2026 02:03Yayımlandı

İlgili açıklar

• 8,8 CVE-2026-118338Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute…
• 8,8 CVE-2026-118315Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially exe…
• 8,8 CVE-2026-118356Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code ins…
• 8,8 CVE-2026-118314Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to po…
• 8,8 CVE-2026-118330Use after free in Browser in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to execute…
• 8,8 CVE-2026-118341Use after free in Modularization in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitra…