VULNERABILITY INTELLIGENCE

CVE-2026-10888

CVSS score8.8 HIGH

EPSS probability0.26%

CISA KEVNot currently listed

Published2026-06-04

Last modified2026-07-22

CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

Weakness classification

CWE-416: Use After Free

Primary references

chrome-cve-admin@google.com — Release Notes, Vendor Advisory
chrome-cve-admin@google.com — Permissions Required