VYPR
High severity8.3NVD Advisory· Published Jun 11, 2026· Updated Jun 12, 2026

CVE-2026-12014

CVE-2026-12014

Description

Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an attacker on the local network segment to potentially perform a sandbox escape via malicious network traffic. (Chromium security severity: High)

Affected products

2
  • Google/Chromeinferred2 versions
    <149.0.7827.115+ 1 more
    • (no CPE)range: <149.0.7827.115
    • (no CPE)range: <149.0.7827.115

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

1