CVE-2026-12012

HIGH

Google Chrome - Use After Free

Title source: rule
STIX 2.1

Description

Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

Scores

CVSS v3 8.1
EPSS 0.0019
EPSS Percentile 9.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (2)
google/chrome < 149.0.7827.114
Google/Chrome 149.0.7827.115
Published Jun 11, 2026
Tracked Since Jun 12, 2026