CVE-2026-93373: Use After Free

Q: What does an attacker need to exploit this vulnerability?

The attacker needs to use a crafted Chrome extension. Successful exploitation allows remote arbitrary code execution outside Chrome’s sandbox.

Q: Which Chrome versions should be remediated?

Google Chrome versions prior to 153.0.8010.52 are affected. Update affected installations to 153.0.8010.52 or later.

Q: What can be done if updating immediately is not possible?

Limit or prevent installation and use of untrusted Chrome extensions until Chrome can be updated. The described attack requires a crafted extension.

Published Sep 17, 2026

Updated

Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted Chrome extension. (Chromium security severity: High)

Affected Software

1 affected component

Google Chrome<153.0.8010.52

Event History

Sep 17, 2026

CVE Published

via MITRE·09:08 PM

Data Sourced

via MITRE·09:08 PM

DescriptionWeakness

Frequently Asked Questions

What does an attacker need to exploit this vulnerability?

The attacker needs to use a crafted Chrome extension. Successful exploitation allows remote arbitrary code execution outside Chrome’s sandbox.

Which Chrome versions should be remediated?

Google Chrome versions prior to 153.0.8010.52 are affected. Update affected installations to 153.0.8010.52 or later.

What can be done if updating immediately is not possible?

Limit or prevent installation and use of untrusted Chrome extensions until Chrome can be updated. The described attack requires a crafted extension.