CVE-2026-15126Disclosure(google / chrome)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
Products
chrome

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-09: 2Technical Details · 2026-07-09: 107-09
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • VulDB 🛡@vuldb
    Disclosure

    There is a new vulnerability with elevated criticality in Google Chrome (CVE-2026-15126) https://vuldb.com/vuln/377081

    Post summary

    A new critical vulnerability (CVE-2026-15126) affecting Google Chrome has been identified, but the provided text lacks technical details, exploitation evidence, patch information, or PoC references.

    00011121
    2.3K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-15126 Use after free in Forms in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromi… https://www.cve.org/CVERecord?id=CVE-2026-15126

    Post summary

    The text provides a brief CVE record summary outlining a use‑after‑free vulnerability in Google Chrome Forms that permits remote execution via crafted HTML, without mentioning any PoC, exploit code, or active exploitation.

    00000696
    57.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgooglechrome---

Explore more