CVE-2026-0908: Use after free in ANGLE
Chromium: CVE-2026-0908 Use after free in ANGLE
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Low)
— MITRE
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 144.0.7559.59 - Upgrade
Upgrade
alpine/qt6-qtwebengineto a version that resolves this vulnerability.Fixed in 6.10.1-r2 - Upgrade
Upgrade
alpine/qt6-qtwebengineto a version that resolves this vulnerability.Fixed in 6.10.1-r6 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1 - Upgrade
Upgrade
debian/webkit2gtkto a version that resolves this vulnerability.Fixed in 2.54.0-1~deb13u3Fixed in 2.54.2-2 - Upgrade
Upgrade
debian/wpewebkitto a version that resolves this vulnerability.Fixed in 2.54.2-1 - Upgrade
Upgrade
Google Chrometo a version that resolves this vulnerability.Fixed in 144.0.7559.59
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2026-0908?
CVE-2026-0908 is classified as a medium severity vulnerability due to potential exploitation risks.
How do I fix CVE-2026-0908?
To fix CVE-2026-0908, update Google Chrome to version 144.0.7559.59 or later, or update Microsoft Edge (Chromium-based) to the latest version.
Which software is affected by CVE-2026-0908?
CVE-2026-0908 affects Google Chrome versions prior to 144.0.7559.59 and Microsoft Edge (Chromium-based) running earlier versions.
What does CVE-2026-0908 vulnerability entail?
CVE-2026-0908 involves a use after free vulnerability in ANGLE which can potentially lead to arbitrary code execution.
Is Microsoft Edge's use of Chromium related to CVE-2026-0908?
Yes, Microsoft Edge (Chromium-based) is affected by CVE-2026-0908 as it is built on the Chromium platform which contains this vulnerability.