Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-6358

Опубликовано: 15 апр. 2026
Источник: redhat
CVSS3: 8.8

Описание

Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Critical)

An use after free flaw was found in the XR component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=497724498

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Дополнительная информация

Статус:

Important
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2458774chromium-browser: Use after free in XR

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 месяца назад

Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Critical)

CVSS3: 8.8
nvd
4 месяца назад

Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Critical)

CVSS3: 8.8
debian
4 месяца назад

Use after free in XR in Google Chrome on Android prior to 147.0.7727.1 ...

CVSS3: 8.8
github
4 месяца назад

Use after free in XR in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Critical)

CVSS3: 8.8
fstec
4 месяца назад

Уязвимость технологии расширенной реальности XR браузера Google Chrome операционных систем Android, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

8.8 High

CVSS3