CVE-2026-15773

Analyzed Analyzed - Analysis Complete

Use After Free in Google Chrome on Windows

Publication date: 2026-07-14

Last updated on: 2026-07-15

Assigner: Chrome

Description

Use after free in Core in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-14

Last Modified

2026-07-15

Generated

2026-08-04

AI Q&A

2026-07-15

EPSS Evaluated

2026-08-02

NVD

CVE-2026-15773

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 150.0.7871.125 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-416	The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Attack-Flow Graph

Executive Summary

This is a use-after-free vulnerability in Google Chrome's Core component on Windows. It allows a remote attacker to execute arbitrary code by exploiting a memory management flaw through a specially crafted HTML page. The vulnerability has a high severity rating due to its potential impact.

Detection Guidance

Detection of this vulnerability requires checking the installed version of Google Chrome. If your version is below 150.0.7871.125, the system is vulnerable. Use commands like 'google-chrome --version' or check via package manager (e.g., 'apt list --installed | grep chrome' on Debian/Ubuntu).

Inspect network traffic for suspicious HTML pages or sandbox escape attempts, though this requires advanced monitoring tools.

Impact Analysis

This vulnerability could allow an attacker to execute malicious code on your system, potentially leading to data theft, installation of malware, or unauthorized access. Since it affects Chrome's sandbox, it might bypass security restrictions, increasing the risk of system compromise.

Compliance Impact

The vulnerability involves a use-after-free issue in Google Chrome that could allow a remote attacker to perform a sandbox escape via a crafted HTML page. This type of vulnerability may lead to unauthorized access or data exfiltration, which could impact compliance with data protection regulations like GDPR or HIPAA by compromising confidentiality and integrity of sensitive data.

Mitigation Strategies

Update Google Chrome to version 150.0.7871.125 or later immediately. Disable automatic updates temporarily if needed, but prioritize patching.

Restrict untrusted HTML content access and enforce sandboxing policies. Monitor for unusual activity or privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-15773. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70