CVE-2026-91716: Use After Free
Published Sep 15, 2026
·Updated
Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
1 affected component
Google Google Chrome<153.0.8010.47
Event History
Sep 15, 2026
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
DescriptionWeakness
Frequently Asked Questions
1
Who is exposed to exploitation?
Users of Google Chrome versions earlier than 153.0.8010.47 are exposed if they can be induced to load a crafted HTML page. The issue can be exploited remotely.
2
What level of access does an attacker need?
The attacker needs to deliver or cause the target to open a crafted HTML page. No local access or prior authentication requirement is stated.
3
What is the potential impact?
Successful exploitation can allow arbitrary code execution outside Chrome's sandbox.
4
How can I determine whether a system is affected?
Check the installed Google Chrome version. Versions prior to 153.0.8010.47 are affected according to the available information.