CRITICAL

CVE-2026-91716

Google Chrome 2026-09-15 CVSS v3.1

CVSS

9.6

Description

Use after free in Auth in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

0.31%

Probability of exploitation in next 30 days

24.1th percentile

References

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html Release Notes, Vendor Advisory https://issues.chromium.org/issues/554558368 Permissions Required

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE