Vulnerability-Lookup

CERTFR-2026-AVI-0791

Vulnerability from certfr_avis - Published: 2026-06-22 - Updated: 2026-06-22

De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Microsoft	Edge	Microsoft Edge versions antérieures à 149.0.4022.80

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft Edge CVE-2026-12447	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12437	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12458	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12455	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12465	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12459	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12453	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12445	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12457	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12464	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12452	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12462	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12443	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12461	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12441	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12468	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12449	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12467	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12439	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12460	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12466	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12451	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12463	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12444	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12454	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12440	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12456	2026-06-19	vendor-advisory
Bulletin de sécurité Microsoft Edge CVE-2026-12446	2026-06-19	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Edge versions ant\u00e9rieures \u00e0 149.0.4022.80",
      "product": {
        "name": "Edge",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-12454",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12454"
    },
    {
      "name": "CVE-2026-12467",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12467"
    },
    {
      "name": "CVE-2026-12439",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12439"
    },
    {
      "name": "CVE-2026-12461",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12461"
    },
    {
      "name": "CVE-2026-12455",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12455"
    },
    {
      "name": "CVE-2026-12464",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12464"
    },
    {
      "name": "CVE-2026-12447",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12447"
    },
    {
      "name": "CVE-2026-12457",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12457"
    },
    {
      "name": "CVE-2026-12446",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12446"
    },
    {
      "name": "CVE-2026-12463",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12463"
    },
    {
      "name": "CVE-2026-12465",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12465"
    },
    {
      "name": "CVE-2026-12437",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12437"
    },
    {
      "name": "CVE-2026-12440",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12440"
    },
    {
      "name": "CVE-2026-12444",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12444"
    },
    {
      "name": "CVE-2026-12453",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12453"
    },
    {
      "name": "CVE-2026-12443",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12443"
    },
    {
      "name": "CVE-2026-12460",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12460"
    },
    {
      "name": "CVE-2026-12449",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12449"
    },
    {
      "name": "CVE-2026-12451",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12451"
    },
    {
      "name": "CVE-2026-12462",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12462"
    },
    {
      "name": "CVE-2026-12458",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12458"
    },
    {
      "name": "CVE-2026-12445",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12445"
    },
    {
      "name": "CVE-2026-12466",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12466"
    },
    {
      "name": "CVE-2026-12459",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12459"
    },
    {
      "name": "CVE-2026-12452",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12452"
    },
    {
      "name": "CVE-2026-12441",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12441"
    },
    {
      "name": "CVE-2026-12468",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12468"
    },
    {
      "name": "CVE-2026-12456",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-12456"
    }
  ],
  "initial_release_date": "2026-06-22T00:00:00",
  "last_revision_date": "2026-06-22T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0791",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-06-22T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Microsoft Edge. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de s\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Microsoft Edge",
  "vendor_advisories": [
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12447",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12447"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12437",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12437"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12458",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12458"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12455",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12455"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12465",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12465"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12459",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12459"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12453",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12453"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12445",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12445"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12457",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12457"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12464",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12464"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12452",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12452"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12462",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12462"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12443",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12443"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12461",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12461"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12441",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12441"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12468",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12468"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12449",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12449"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12467",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12467"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12439",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12439"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12460",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12460"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12466",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12466"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12451",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12451"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12463",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12463"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12444",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12444"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12454",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12454"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12440",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12440"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12456",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12456"
    },
    {
      "published_at": "2026-06-19",
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft Edge CVE-2026-12446",
      "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-12446"
    }
  ]
}

CVE-2026-12437 (GCVE-0-2026-12437)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Severity

8.3 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/516496659

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12437",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:16.275Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in WebShare in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:08.392Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/516496659"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12437",
    "datePublished": "2026-06-17T01:38:08.392Z",
    "dateReserved": "2026-06-16T19:38:23.069Z",
    "dateUpdated": "2026-06-18T03:55:16.275Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12439 (GCVE-0-2026-12439)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/519728275

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12439",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:18.757Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:09.876Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/519728275"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12439",
    "datePublished": "2026-06-17T01:38:09.876Z",
    "dateReserved": "2026-06-16T19:38:23.945Z",
    "dateUpdated": "2026-06-18T03:55:18.757Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12440 (GCVE-0-2026-12440)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/519731619

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.6,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12440",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:19.840Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:10.500Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/519731619"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12440",
    "datePublished": "2026-06-17T01:38:10.500Z",
    "dateReserved": "2026-06-16T19:38:24.292Z",
    "dateUpdated": "2026-06-18T03:55:19.840Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12441 (GCVE-0-2026-12441)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/520157118

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12441",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:20.956Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:11.196Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/520157118"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12441",
    "datePublished": "2026-06-17T01:38:11.196Z",
    "dateReserved": "2026-06-16T19:38:24.676Z",
    "dateUpdated": "2026-06-18T03:55:20.956Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12443 (GCVE-0-2026-12443)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/522566295

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12443",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:35.556Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Web Authentication in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:12.354Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/522566295"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12443",
    "datePublished": "2026-06-17T01:38:12.354Z",
    "dateReserved": "2026-06-16T19:38:25.435Z",
    "dateUpdated": "2026-06-18T03:55:35.556Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12444 (GCVE-0-2026-12444)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-17 10:54

Summary

Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: High)

Severity

5.5 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-125 - Out of bounds read

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/513160088

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "NONE",
              "baseScore": 5.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12444",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T10:54:14.668910Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T10:54:18.884Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out of bounds read in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out of bounds read",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:12.910Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/513160088"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12444",
    "datePublished": "2026-06-17T01:38:12.910Z",
    "dateReserved": "2026-06-16T19:38:25.763Z",
    "dateUpdated": "2026-06-17T10:54:18.884Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12445 (GCVE-0-2026-12445)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/513199795

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12445",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:23.261Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Extensions in Google Chrome prior to 149.0.7827.155 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:13.450Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/513199795"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12445",
    "datePublished": "2026-06-17T01:38:13.450Z",
    "dateReserved": "2026-06-16T19:38:26.066Z",
    "dateUpdated": "2026-06-18T03:55:23.261Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12446 (GCVE-0-2026-12446)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-17 10:53

Summary

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Severity

4.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

Insufficient data validation
CWE-863 - Incorrect Authorization

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/513313107

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 4.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12446",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T10:53:35.806104Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-863",
                "description": "CWE-863 Incorrect Authorization",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-17T10:53:40.448Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Insufficient data validation",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:14.061Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/513313107"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12446",
    "datePublished": "2026-06-17T01:38:14.061Z",
    "dateReserved": "2026-06-16T19:38:26.416Z",
    "dateUpdated": "2026-06-17T10:53:40.448Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12447 (GCVE-0-2026-12447)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-122 - Heap buffer overflow

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/513405023

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12447",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:37.721Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap buffer overflow in WebRTC in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap buffer overflow",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:14.680Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/513405023"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12447",
    "datePublished": "2026-06-17T01:38:14.680Z",
    "dateReserved": "2026-06-16T19:38:26.765Z",
    "dateUpdated": "2026-06-18T03:55:37.721Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-12449 (GCVE-0-2026-12449)

Vulnerability from cvelistv5 – Published: 2026-06-17 01:38 – Updated: 2026-06-18 03:55

Summary

Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-416 - Use after free

Assigner

Chrome

References

2 references

URL	Tags
https://chromereleases.googleblog.com/2026/06/sta…
https://issues.chromium.org/issues/513480539

Impacted products

1 product

Vendor	Product	Version
Google	Chrome	Affected: 149.0.7827.155 , < 149.0.7827.155 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-12449",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-18T03:55:40.984Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Chrome",
          "vendor": "Google",
          "versions": [
            {
              "lessThan": "149.0.7827.155",
              "status": "affected",
              "version": "149.0.7827.155",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Use after free in Chromoting in Google Chrome on Windows prior to 149.0.7827.155 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: High)"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-416",
              "description": "Use after free",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-17T01:38:15.849Z",
        "orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
        "shortName": "Chrome"
      },
      "references": [
        {
          "url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html"
        },
        {
          "url": "https://issues.chromium.org/issues/513480539"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
    "assignerShortName": "Chrome",
    "cveId": "CVE-2026-12449",
    "datePublished": "2026-06-17T01:38:15.849Z",
    "dateReserved": "2026-06-16T19:38:27.534Z",
    "dateUpdated": "2026-06-18T03:55:40.984Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2026-AVI-0791

Solutions

CVE-2026-12437 (GCVE-0-2026-12437)

CVE-2026-12439 (GCVE-0-2026-12439)

CVE-2026-12440 (GCVE-0-2026-12440)

CVE-2026-12441 (GCVE-0-2026-12441)

CVE-2026-12443 (GCVE-0-2026-12443)

CVE-2026-12444 (GCVE-0-2026-12444)

CVE-2026-12445 (GCVE-0-2026-12445)

CVE-2026-12446 (GCVE-0-2026-12446)

CVE-2026-12447 (GCVE-0-2026-12447)

CVE-2026-12449 (GCVE-0-2026-12449)

Tags

Sightings

Nomenclature