CVE Catalog
CVE-2026-12035
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.04%
11th percentile - higher than 11% of all known CVEs
Summary
A use after free vulnerability in Views in Google Chrome on Windows prior to version 149.0.7827.115 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Risk Assessment
This vulnerability poses a high risk to organizations, allowing attackers to remotely take control of the system by exploiting memory corruption.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and reduce the risk of attacks.
Original NVD description (English source)
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)