NetSight
critical9.6

CVE-2026-95356

Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary…

Impact

Use after free in WindowDialog in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Affected products

VendorProductAffected versions
GoogleChrome
before 154.0.8037.57

Weakness classification

References