Description
Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-06-08
Score: 8.3 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Use after free in Web Apps in Google Chrome before version 149.0.7827.103 leads to a sandbox escape when a remote attacker has already compromised the renderer process. The vulnerability allows the attacker to execute code in a privileged context by serving a crafted HTML page, effectively bypassing browser sandbox restrictions and potentially compromising the operating system.

Affected Systems

Google Chrome desktop browsers on all supported platforms, versions earlier than 149.0.7827.103.

Risk and Exploitability

The vulnerability is rated critical in Chromium security. No EPSS score is available and it is not listed in the CISA KEV catalog. Exploitation requires control over the renderer process and delivery of a malicious HTML payload, making successful attacks more complex but still plausible if the renderer is compromised. The CVSS score is 8.3, indicating a high severity level and a significant potential impact if exploited.

Generated by OpenCVE AI on June 9, 2026 at 03:56 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to version 149.0.7827.103 or later.
  • Disable or restrict Web Apps via Chrome Enterprise policies (e.g., set WebAppsAllowed to false).
  • Enable strict sandbox features through policy to reduce reliance on the vulnerable renderer code.

Generated by OpenCVE AI on June 9, 2026 at 03:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 09 Jun 2026 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Tue, 09 Jun 2026 04:15:00 +0000

Type Values Removed Values Added
Title Use After Free Leading to Sandbox Escape via Web Apps in Chrome

Tue, 09 Jun 2026 02:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 09 Jun 2026 01:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 09 Jun 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use After Free Leading to Sandbox Escape via Web Apps in Chrome

Mon, 08 Jun 2026 23:45:00 +0000

Type Values Removed Values Added
Description Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Apple Macos
Google Chrome
Linux Linux Kernel
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-09T03:56:15.104Z

Reserved: 2026-06-08T21:33:36.872Z

Link: CVE-2026-11642

cve-icon Vulnrichment

Updated: 2026-06-09T01:39:31.215Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-09T00:16:46.947

Modified: 2026-06-09T14:57:23.190

Link: CVE-2026-11642

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-09T04:00:14Z

Weaknesses