CVE-2026-91736: Use After Free

Q: Which Chrome installations should be treated as affected?

Google Chrome versions prior to 153.0.8010.47 are affected. Verify the installed Chrome version and update to 153.0.8010.47 or later.

Q: What must an attacker do to exploit this issue?

An attacker needs to induce Chrome to process a crafted HTML page. Successful exploitation can execute arbitrary code inside Chrome's sandbox.

Published Sep 15, 2026

Updated

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<153.0.8010.47

Event History

Sep 15, 2026

CVE Published

via MITRE·08:41 PM

Data Sourced

via MITRE·08:41 PM

DescriptionWeakness

Frequently Asked Questions

Which Chrome installations should be treated as affected?

Google Chrome versions prior to 153.0.8010.47 are affected. Verify the installed Chrome version and update to 153.0.8010.47 or later.

What must an attacker do to exploit this issue?

An attacker needs to induce Chrome to process a crafted HTML page. Successful exploitation can execute arbitrary code inside Chrome's sandbox.