CVE-2026-12035
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
A use after free vulnerability in Views in Google Chrome on Windows prior to version 149.0.7827.115 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Risk Assessment
This vulnerability poses a high risk to organizations, allowing attackers to remotely take control of the system by exploiting memory corruption.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and reduce the risk of attacks.
Other vulnerabilities in Google Chrome Views
See all- CVE-2026-7910Critical
A use after free vulnerability in Views in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.
- CVE-2026-7976High
In Google Chrome prior to version 148.0.7778.96, a use after free vulnerability in Views allowed an attacker to execute arbitrary code via a malicious extension if a user installed it.
Original NVD description (English source)
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Vulnerability data from NVD (NIST) · CISA KEV · EPSS