Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-4454: Google Chrome: Malicious website can crash browser, potentially harm system
CVE-2026-4454 · published 7 months ago
Summary
A bug in older versions of Google Chrome can allow a malicious website to cause the browser to crash or behave unexpectedly. This could potentially allow an attacker to execute arbitrary code on the system, but no evidence suggests this has happened. Users should update to the latest version of Chrome to fix the issue.
What to do
- Update debian chromium to version 146.0.7680.153-1~deb12u1.
- Update debian chromium to version 146.0.7680.153-1~deb13u1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium |
< 146.0.7680.153-1~deb12u1 Fix: upgrade to 146.0.7680.153-1~deb12u1
|
| Debian:13 | debian | chromium |
< 146.0.7680.153-1~deb13u1 Fix: upgrade to 146.0.7680.153-1~deb13u1
|
| Debian:14 | debian | chromium | All versions |
Original advisory text
Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in Network in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.8
High
Type
CWE-416Use After Free
Timeline
Published20 Mar 2026
Updated4 Nov 2026
First seen20 Mar 2026
Track software like this
Free during beta