CVE-2026-76045: Use After Free

Q: Who is exposed to this issue?

Users of Google Chrome versions earlier than 151.0.7922.169 are exposed when they visit a crafted HTML page that triggers the WebGL use-after-free condition.

Q: What does an attacker need to exploit it?

The attacker needs to persuade a user to load a crafted HTML page. The stated impact is arbitrary code execution inside the Chrome sandbox; no sandbox escape is described.

Q: What should be done to remediate the vulnerability?

Update Google Chrome to version 151.0.7922.169 or later. The provided information does not identify a configuration workaround if updating cannot be performed immediately.

Published Aug 18, 2026

Updated

Use after free in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<151.0.7922.169

Event History

Aug 18, 2026

CVE Published

via MITRE·08:31 PM

Data Sourced

via MITRE·08:31 PM

DescriptionWeakness

Frequently Asked Questions

Who is exposed to this issue?

Users of Google Chrome versions earlier than 151.0.7922.169 are exposed when they visit a crafted HTML page that triggers the WebGL use-after-free condition.

What does an attacker need to exploit it?

The attacker needs to persuade a user to load a crafted HTML page. The stated impact is arbitrary code execution inside the Chrome sandbox; no sandbox escape is described.

What should be done to remediate the vulnerability?

Update Google Chrome to version 151.0.7922.169 or later. The provided information does not identify a configuration workaround if updating cannot be performed immediately.