CVE-2026-2441

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome, Red Os

Google Chrome

< 145.0.7632.75

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

22.0% (98th percentile)

Weakness

CWE-416

NVD status

Analyzed

Published

2026-02-13