cve-2026-6309

CVE-2026-6309 is a high-severity use-after-free vulnerability in the Viz component of Chromium, affecting Chrome and Microsoft Edge. Google fixed it in Chrome 147.0.7727.101/102 for Windows and Mac, and 147.0.7727.101 for Linux. The flaw allows a remote attacker who has already compromised the renderer process to escape the sandbox using a crafted HTML page. Microsoft tracks the same issue for downstream visibility, making it critical for Windows administrators to apply patches promptly. Discussions on WindowsForum cover the vulnerability's impact, Chrome update guidance, and Edge/Windows patch coordination.