NetSight
IP …
critical9.6

CVE-2026-9874

Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Impact

Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Affected products

VendorProductAffected versions
GoogleChrome
before 148.0.7778.216
before 148.0.7778.215

Weakness classification

CWE-416

References