Description
Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-06-04
Score: 7.5 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free bug exists in Chrome’s password handling code on macOS versions before 149.0.7827.53. The flaw allows a remote attacker, who lures a user into performing specific UI gestures while visiting a crafted HTML page, to corrupt heap objects. Heap corruption can lead to arbitrary code execution or other severe failures.

Affected Systems

The vulnerability affects Google Chrome running on macOS. Any installation of Chrome prior to version 149.0.7827.53 is potentially vulnerable. Users of later releases are not affected.

Risk and Exploitability

The Chromium security team rates the issue as Critical, and the CVSS score of 7.5 indicates high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the user to open a malicious webpage and perform certain UI gestures, suggesting a remote exploitation vector that is user‑dependent but feasible over the Internet.

Generated by OpenCVE AI on June 5, 2026 at 05:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to Chrome 149.0.7827.53 or later on macOS
  • Ensure your operating system and Chromium components are updated to the latest stable release
  • If a critical need exists to maintain older Chrome versions, disable the Passwords feature or remove the browser until a patch is applied

Generated by OpenCVE AI on June 5, 2026 at 05:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 05 Jun 2026 05:45:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome Passwords Module Leading to Heap Corruption

Fri, 05 Jun 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 05 Jun 2026 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Fri, 05 Jun 2026 01:30:00 +0000

Type Values Removed Values Added
Title Use After Free in Chrome Passwords Module Leading to Heap Corruption

Thu, 04 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Use after free in Passwords in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-05T01:45:07.172Z

Reserved: 2026-06-04T17:05:59.405Z

Link: CVE-2026-10900

cve-icon Vulnrichment

Updated: 2026-06-05T01:44:58.699Z

cve-icon NVD

Status : Received

Published: 2026-06-04T23:16:51.703

Modified: 2026-06-05T02:16:53.013

Link: CVE-2026-10900

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-05T05:30:32Z

Weaknesses