A flaw was found in chromium-browser. A use-after-free memory issue within the Federated Credential Management (FedCM) component allows a remote attacker to execute arbitrary code outside the browser security sandbox by enticing a user to visit a crafted HTML page. Successful exploitation could allow an attacker to bypass browser isolation controls and compromise the underlying system.
Last checked: 2026-10-06 16:33 UTC
No exploitation evidence · CISA Coordinator (Assessed 2026-10-03 03:55 UTC)
Fix evidence last checked: 2026-10-22 21:20 UTC
Debian 12 (Bookworm)
DLA-4833-1 · Published 2026-10-13
Debian 13 (Trixie)
DSA-6553-1 · Published 2026-10-12