VULNERABILITY INTELLIGENCE

CVE-2026-39199

CVSS score2.9 LOW

EPSS probability0.27%

CISA KEVNot currently listed

Published2026-06-17

Last modified2026-10-26

Description

Use after free in Extensions in Google Chrome prior to 146.0.7680.71 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)