Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Description

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected Products

Also Affects

Downstream vendors/products affected by this vulnerability

References

• https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html(Release Notes)
• https://issues.chromium.org/issues/483569511(Issue Tracking, Permissions Required)
• https://github.com/huseyinstif/CVE-2026-2441-PoC/blob/main/poc.html(Exploit)
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-2441(US Government Resource)

Related News (2 articles)