Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-06-19 | 1 | General1 |
| 2026-06-29 | 1 | Patch1 |
#securityupdate #chromeos Google が LTS-144 バージョンとして ChromeOS 144.0.7559.256 (Platform Version: 16503.88.0) をリリース． Critical 5 件 ・CVE-2026-12008 ・CVE-2026-12439 ・CVE-2026-12440 ・CVE-2026-12441 ・CVE-2026-13033 https://x.com/kawn2020/status/2071392243370582059
Post summary
Google released ChromeOS LTS-144, addressing five critical CVEs.
🪟 Edge getting a Chromium CVE is like finding out your house is “branded” but still built with the same bad wiring. Fix still lands in Edge—until it does, users pay. #Windows #Microsoft #Edge #Security https://windowsforum.com/threads/cve-2026-12440-why-microsoft-edge-needs-the-chromium-fix-digitalcredentials.428171/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #MicrosoftEdge #EnterprisePatching #ChromiumSecurity https://t.co/yGydSkEoba
Post summary
The post discusses Microsoft Edge potentially still shipping a pending Chromium CVE (CVE‑2026‑12440) and cautions users until a fix lands, but it provides no PoC, exploit, patch details, or technical specifics.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - | |
| OS | microsoft | windows | - | - | - |