Description
Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-06-17
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free bug in Chrome’s File Input on Linux allows a remote attacker to trigger heap corruption by loading a specially crafted HTML page, potentially leading to arbitrary code execution. This flaw is classified as CWE‑416 and CWE‑825 and was marked critical by Chromium security. The vulnerability enables remote exploitation from a web page hosted on an attacker‑controlled domain, giving the attacker control over memory that can be leveraged for code execution or persistence.

Affected Systems

Google Chrome on Linux, specifically versions earlier than 149.0.7827.155. No other product or platform is listed as affected in the CNA data.

Risk and Exploitability

The CVSS score of 8.8 indicates a high severity exploitation potential. The EPSS score of <1% suggests that the likelihood of exploitation is currently low, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be remote via a crafted HTML page, as stated in the description, and could allow an attacker to execute arbitrary code if the victim opens the malicious page in a vulnerable Chrome installation.

Generated by OpenCVE AI on June 19, 2026 at 13:52 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Chrome to version 149.0.7827.155 or later from the official source.
  • Enable automatic updates for Chrome so that the browser can receive future security patches without manual intervention.
  • If an upgrade cannot be deployed immediately, block or filter web pages that exploit the file‑input vulnerability (e.g., from untrusted domains) using a web content filter or firewall rule until the patch is applied.

Generated by OpenCVE AI on June 19, 2026 at 13:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6351-1 chromium security update
History

Fri, 19 Jun 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome File Input Enables Remote Heap Corruption on Linux chromium-browser: chromium-browser: Use after free in File Input
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Important

Thu, 18 Jun 2026 04:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome File Input Enables Remote Heap Corruption on Linux

Wed, 17 Jun 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 17 Jun 2026 07:15:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 17 Jun 2026 05:15:00 +0000

Type Values Removed Values Added
Description Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-18T03:55:20.956Z

Reserved: 2026-06-16T19:38:24.676Z

Link: CVE-2026-12441

cve-icon Vulnrichment

Updated: 2026-06-17T12:56:47.552Z

cve-icon NVD

No data.

cve-icon Redhat

Severity : Important

Publid Date: 2026-06-17T01:38:11Z

Links: CVE-2026-12441 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-06-19T14:00:16Z

Weaknesses