Description
Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-06-04
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free flaw in the WebXR implementation of Google Chrome, which also involves a buffer overread (CWE‑825), allows a remote attacker to execute arbitrary code within the browser sandbox by loading a specially crafted HTML page.

Affected Systems

The vulnerability affects all Chrome releases before version 149.0.7827.53, including older 148.x builds and any 149.x build that has not yet applied the patch. Any system running these versions is potentially susceptible.

Risk and Exploitability

The flaw is rated high severity by Chromium and is exploitable via a normal web page served to a user, enabling an attacker to run code at the sandbox level. The EPSS score is < 1%, indicating a very low exploitation probability, but the high severity and direct execution vector still represent a significant risk. The CVE is not listed in CISA’s KEV catalog. This issue maps to a use‑after‑free (CWE‑416) and a buffer overread (CWE‑825).

Generated by OpenCVE AI on June 7, 2026 at 16:40 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Google Chrome to version 149.0.7827.53 or newer.
  • Restart Chrome after updating to ensure the patched code is loaded.
  • If an immediate update cannot be performed, open chrome://flags, set "Enable WebXR" to Disabled, or otherwise disable WebXR for all sites to mitigate until a patch is available.

Generated by OpenCVE AI on June 7, 2026 at 16:40 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6325-1 chromium security update
History

Sun, 07 Jun 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome WebXR Allows Remote Code Execution chromium-browser: Use after free in WebXR
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Important

Sat, 06 Jun 2026 02:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Fri, 05 Jun 2026 04:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Fri, 05 Jun 2026 03:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome WebXR Allows Remote Code Execution

Fri, 05 Jun 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 04 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

Apple Macos
Google Chrome
Linux Linux Kernel
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-06T03:56:49.761Z

Reserved: 2026-06-04T17:06:21.689Z

Link: CVE-2026-10982

cve-icon Vulnrichment

Updated: 2026-06-05T00:25:31.977Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-04T23:17:01.523

Modified: 2026-06-06T01:45:56.540

Link: CVE-2026-10982

cve-icon Redhat

Severity : Important

Publid Date: 2026-06-02T00:00:00Z

Links: CVE-2026-10982 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-06-07T16:45:04Z

Weaknesses