Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-4441: Google Chrome: Malicious HTML pages can crash browser
CVE-2026-4441 · published 7 months ago
Summary
A security issue in older versions of Google Chrome can allow attackers to crash the browser with a malicious HTML page, potentially causing data loss or system instability. This issue can be exploited remotely, which means an attacker doesn't need access to your device to cause harm. Update to the latest version of Google Chrome to protect your system.
What to do
- Update debian chromium to version 146.0.7680.153-1~deb12u1.
- Update debian chromium to version 146.0.7680.153-1~deb13u1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium |
< 146.0.7680.153-1~deb12u1 Fix: upgrade to 146.0.7680.153-1~deb12u1
|
| Debian:13 | debian | chromium |
< 146.0.7680.153-1~deb13u1 Fix: upgrade to 146.0.7680.153-1~deb13u1
|
| Debian:14 | debian | chromium | All versions |
Original advisory text
Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Use after free in Base in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.8
High
Type
CWE-416Use After Free
Timeline
Published20 Mar 2026
Updated4 Nov 2026
First seen20 Mar 2026
Track software like this
Free during beta