CVE-2026-15110: Use after free in Extensions
Chromium: CVE-2026-15110 Use after free in Extensions
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in Extensions in Google Chrome prior to 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)
— NVD
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 150.0.7871.114 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 150.0.4078.65 - Upgrade
Upgrade
Google Chrome/Chromium-based browsers (Extensions)to a version that resolves this vulnerability.Fixed in 150.0.7871.115Patch CVE-2026-15110 - Compensating control
Prevent or restrict installation of malicious extensions (e.g., only allow trusted extensions / restrict extension installation to trusted users) until browsers are updated to include the fix for CVE-2026-15110.
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2026-15112
- CVE-2026-15129
- CVE-2026-15132
- CVE-2026-15133
- CVE-2026-15108
- CVE-2026-15109
- CVE-2026-15111
- CVE-2026-15113
- CVE-2026-15114
- CVE-2026-15115
- CVE-2026-15116
- CVE-2026-15117
- CVE-2026-15118
- CVE-2026-15119
- CVE-2026-15120
- CVE-2026-15121
- CVE-2026-15122
- CVE-2026-15123
- CVE-2026-15124
- CVE-2026-15125
- CVE-2026-15126
- CVE-2026-15127
- CVE-2026-15128
- CVE-2026-15130
- CVE-2026-15107
- CVE-2026-15131
Frequently Asked Questions
What is the severity of CVE-2026-15110?
CVE-2026-15110 has a high severity rating of 8.8 based on the CVSS score.
How do I fix CVE-2026-15110?
To fix CVE-2026-15110, update Google Chrome to the latest version, specifically version 150.0.7871.115 or later.
What type of vulnerability is CVE-2026-15110?
CVE-2026-15110 is categorized as a Use After Free vulnerability in Google Chrome Extensions.
What can an attacker do with CVE-2026-15110?
An attacker can potentially exploit heap corruption by convincing a user to install a malicious Chrome Extension.
Which software is affected by CVE-2026-15110?
CVE-2026-15110 affects Google Chrome prior to version 150.0.7871.115.