Description
Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Published:
2026-10-02
Score:
n/a
EPSS:
n/a
KEV:
No
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
Fri, 02 Oct 2026 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Use after free in MediaStream in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) | |
| Weaknesses | CWE-416 | |
| References |
|
Subscriptions
No data.
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2026-10-02T16:07:56.124Z
Reserved: 2026-09-30T23:12:15.202Z
Link: CVE-2026-103623
No data.
Status : Received
Published: 2026-10-02T16:16:43.400
Modified: 2026-10-02T16:16:43.400
Link: CVE-2026-103623
No data.
OpenCVE Enrichment
No data.
Weaknesses