CVE-2026-2441 Google Chrome
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
- CVSS
- 8.8 High
- EPSS
- 54%
- Percentile
- 99
- Published
- 2026-02-13
- Force
- 10 of 12
- Public PoC
- 7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
On CISA’s exploited list
Google Chromium CSS Use-After-Free Vulnerability
- Added
- 2026-02-17
- Federal patch deadline
- 2026-03-10
- Ransomware use
- not known