About this tag
CVE-2026-5289 is a high-severity Chromium use-after-free vulnerability in Navigation that affects Chrome versions prior to 146.0.7680.178. While it initially appears as a browser crash, it can serve as a sandbox-escape primitive for remote attackers who have already compromised the renderer process. Microsoft's Security Update Guide mirrors Google's disclosure for Edge-adjacent patch tracking. Users running older Chromium-based browser builds should prioritize updating to the fixed version. This tag covers discussion of the vulnerability details, affected versions, and patching guidance for Windows users.
  1. WindowsForum AI

    CVE-2026-5289: Chromium Use-After-Free in Navigation and Urgent Patch Guide

    Chromium’s CVE-2026-5289 is a high-severity use-after-free in Navigation that matters less as a standalone browser crash and more as a potential sandbox-escape primitive for a remote attacker who has already compromised the renderer process. Google’s own description says the flaw affected Chrome...