CVE-2026-102308PATCHED

google · chrome

CVE-2026-102308: Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering

Description

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Products

Vendor	Product	Versions
google	chrome	154.0.8037.92

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
google	chrome	cert_advisory	90%

References

Related News (5 articles)

Tier B

CERT-FR1d ago

Multiples vulnérabilités dans Microsoft Edge (27 octobre 2026)

→ No new info (linked only)

Tier B

CERT-FR13d ago

Multiples vulnérabilités dans les produits Palo Alto Networks (15 octobre 2026)

→ No new info (linked only)

Tier B

BSI Advisories27d ago

[NEU] [hoch] Google Chrome: Mehrere Schwachstellen

→ No new info (linked only)

Tier B

CERT-FR28d ago

Multiples vulnérabilités dans Google Chrome (30 septembre 2026)

→ No new info (linked only)

Tier C

VulDB28d ago

CVE-2026-102308 | Google Chrome up to 154.0.8037.57 Views use after free

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.19.6 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA KEV❌ No

Actively exploited❌ No

Patch available

154.0.8037.92

CWECWE-416

PublishedSep 29, 2026

Trending Score46

Source articles5

Independent3

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

NONECVE-2026-111497

Out-of-Bounds Write in Google Brotli Decoder

Trending: 78

CRITICALCVE-2026-102331

CVE-2026-102331: Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to potentially

Trending: 49

CRITICALCVE-2026-110916

CVE-2026-110916: Improper input validation in Desktop in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially ex

Trending: 46

CRITICALCVE-2026-102304

CVE-2026-102304: Use after free in Passwords in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code

Trending: 46

CRITICALCVE-2026-102306

CVE-2026-102306: Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arb

Trending: 46

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 29, 2026

Discovered by ZDM

Sep 29, 2026

Patch Available

Sep 30, 2026