CVE-2026-10926

high

Description

Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security severity: High)

References

https://issues.chromium.org/issues/500075522

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-34375

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html

Details

Source: Mitre, NVD

Published: 2026-06-04

Updated: 2026-07-22

Named Vulnerability: GHSA-rwjq-m543-2gh5

Risk Information

CVSS v2

Base Score: 8.3

Vector: CVSS2#AV:A/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H