VulnSocial

CVE-2026-12027Active Exploitation(apple / chrome)

MEDIUMCVSS 9.6 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch apple chrome systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

apple CVEsBack to dashboard
5.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-250CWE-693

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • linux_kernel
  • macos
  • windows

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 2 signals
  • Peaked 1d ago at 1 mentions (2026-06-12); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
applegooglelinuxmicrosoft
Products
chromelinux_kernelmacoswindows

1 version affected across 4 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-12: 1Mentions · 2026-06-14: 1Active Exploitation · 2026-06-12: 1Patch / Workaround · 2026-06-12: 1Patch / Workaround · 2026-06-14: 1Technical Details · 2026-06-12: 1Technical Details · 2026-06-14: 106-1206-14
Signal classification2 categories
Active Exploitation
150.0%
Patch
150.0%
Classification over time
DateTotalLabels
2026-06-121
Active Exploitation1
2026-06-141
Patch1
Full discourse2 posts
  • NerdieNews@NewsNerdie
    Active Exploitation

    🚨 Actively exploited: CVE-2026-12027 in Google Chrome Headless allows attackers to escape the sandbox and execute arbitrary code. Affected versions: <149.0.7. Patch immediately to prevent full compromise. #NerdieNews #CyberSecurity #Vulnerability https://t.co/lmRDRSJJx4

    Post summary

    The tweet announces that CVE-2026-12027 in Google Chrome Headless is actively exploited, enabling sandbox escape and code execution, and urges users to patch immediately.

    0001049
    65 followersView on X
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨 Critical - Google Chrome Headless Mode Sandbox Escape (CVE-2026-12027) A critical security vulnerability has been identified in the Headless mode implementation of Google Chrome. Due to an inappropriate policy enforcement mechanism within its background browser framework, a remote attacker who has already managed to achieve remote code execution inside the restricted rendering process can trigger a secondary exploit stage. By luring the browser to parse a specially crafted HTML document, the attacker can break out of the rendering sandbox entirely, gaining higher operational privileges and access to the host operating system's restricted resources. 👉 Affected: Google Chrome versions prior to 149.0.7827.115 | Upgrade to version 149.0.7827.114

    Post summary

    A critical sandbox escape flaw (CVE-2026-12027) in Chrome Headless allows remote attackers who have RCE in the rendering process to escape to the OS; patched by upgrading to Chrome 149.0.7827.114.

    00000155
    216 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more

Back to dashboardapple CVEsgoogle CVEslinux CVEschrome vulnerabilities