Description
Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-06-04
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free flaw in the WebXR implementation of Google Chrome allows a remote attacker to execute arbitrary code within the browser sandbox by loading a specially crafted HTML page.

Affected Systems

The vulnerability affects all Chrome releases before version 149.0.7827.53, including older 148.x builds and any 149.x build that has not yet applied the patch. Any system running these versions is potentially susceptible.

Risk and Exploitability

The flaw is rated high severity by Chromium and is exploitable via a normal web page served to a user, enabling an attacker to run code at the sandbox level. The CVE is not listed in CISA’s KEV catalog, but the high severity and direct execution vector underscore a significant risk.

Generated by OpenCVE AI on June 5, 2026 at 03:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to Google Chrome 149.0.7827.53 or newer to eliminate the use‑after‑free bug.
  • Disable WebXR support in Chrome via the experimental flags (chrome://flags) or by applying a policy that blocks WebXR APIs, to prevent exploitation when an upgrade is delayed.
  • Block or filter suspicious web content and enforce strict same‑origin policies to reduce the likelihood of malicious pages delivering crafted WebXR payloads.

Generated by OpenCVE AI on June 5, 2026 at 03:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 05 Jun 2026 04:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Fri, 05 Jun 2026 03:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome WebXR Allows Remote Code Execution

Fri, 05 Jun 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 04 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Use after free in WebXR in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-05T00:29:50.961Z

Reserved: 2026-06-04T17:06:21.689Z

Link: CVE-2026-10982

cve-icon Vulnrichment

Updated: 2026-06-05T00:25:31.977Z

cve-icon NVD

Status : Received

Published: 2026-06-04T23:17:01.523

Modified: 2026-06-05T02:17:03.120

Link: CVE-2026-10982

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-05T04:15:25Z

Weaknesses