A flaw was found in chromium-browser. A use-after-free issue in the Views framework allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a specially crafted HTML page. Exploitation of this vulnerability occurs when the application references memory after it has been released, potentially compromising the host system.
Last checked: 2026-09-30 17:15 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-09-29 00:00 UTC)
Fix evidence last checked: 2026-10-22 21:20 UTC
Debian 12 (Bookworm)
DLA-4811-1 · Published 2026-10-02
Debian 13 (Trixie)
DSA-6535-1 · Published 2024-12-01