CVE-2026-76040: Use after free in Browser
Chromium: CVE-2026-76040 Use after free in Browser
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in Browser in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
— NVD
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 151.0.7922.169 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 151.0.4129.101 - Upgrade
Upgrade
Chromium-based browsers (Google Chrome/Edge ingests Chromium)to a version that resolves this vulnerability.Fixed in 151.0.7922.169
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
Which systems are affected?
The affected product is Google Chrome on Mac, with versions prior to 151.0.7922.169 identified as vulnerable. The issue is described as a browser use-after-free vulnerability with Chromium severity rated High.
What does an attacker need to exploit this issue?
A remote attacker needs to persuade a user to interact with a crafted HTML page. Successful exploitation can result in arbitrary code execution outside Chrome’s sandbox.
What is the recommended remediation?
Update Google Chrome on Mac to version 151.0.7922.169 or later. The provided data does not identify an alternative mitigation for environments where updating cannot be performed immediately.