cve 2026 6318

About this tag
CVE-2026-6318 is a use-after-free vulnerability in Google Chrome's Codecs component, affecting versions prior to 147.0.7727.101. This memory safety bug could allow a remote attacker to execute code within the browser sandbox via a crafted HTML page. The flaw is tracked in Microsoft's Security Update Guide because Microsoft Edge inherits Chromium fixes through the upstream-to-downstream pipeline. Users are advised to update Chrome to version 147.0.7727.101 or later to mitigate the risk. The vulnerability highlights ongoing security challenges with memory safety in browsers.
  1. CVE-2026-6318 Chrome Codecs Use-After-Free: Update to 147.0.7727.101

    Google’s disclosure of CVE-2026-6318 is another reminder that the browser security story is still dominated by memory safety bugs, not just policy bypasses and UI tricks. The flaw is a use-after-free in Codecs affecting Google Chrome prior to 147.0.7727.101, and Google says a crafted HTML page...