CRITICAL

CVE-2026-91729

Google Chrome 2026-09-15 CVSS v3.1

CVSS

9.6

Description

Use after free in DigitalCredentials in Google Chrome prior to 153.0.8010.47 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Weakness (CWE)

CWE-416 Use After Free

EPSS Score

0.34%

Probability of exploitation in next 30 days

27.4th percentile

References

https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0541751186.html Release Notes, Vendor Advisory https://issues.chromium.org/issues/557206809 Permissions Required

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE