CVE-2026-6300

Use after free in CSS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome, Red Os

Google Chrome

< 147.0.7727.101

CVSS 3.1

8.8 HIGH

EPSS

0.3% (27th percentile)

Weakness

CWE-416

NVD status

Modified

Published

2026-04-15