This vulnerability is known to have been exploited in attacks. Update affected browsers immediately.
CVE details
CVE-2026-2441
Use after free in CSS in Google Chrome prior to 145.
Description
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Affected products
- Google Chrome · → 145.0.7632.75
- Google Chrome · → 145.0.7632.76
Overlaps: Google Chrome