CVE-2026-12440
Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML pag…
Published: 2026-06-17 · CVSS: 9.6 · CVSS 3.1
Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7