Unrated severityNVD Advisory· Published Jun 17, 2026

CVE-2026-12452

Description

Use after free in Downloads in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

Google/Chromellm-fuzzy
Range: <149.0.7827.155
osv-coords
pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed
Range: < 149.0.7827.155-1.1

Patches

Vulnerability mechanics

References

chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.htmlmitre
issues.chromium.org/issues/515462244mitre

News mentions

Critical Chrome Vulnerabilities Allow Attackers to Execute Arbitrary Code – Update Now!
Cyber Security News · Jun 17, 2026
Google Chrome: 25 High-Severity CVEs Patched in June 2026 Update
Vypr Intelligence · Jun 17, 2026

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000