Chromium: CVE-2026-3924 Use after free in WindowDialog

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-3924

use after free in WindowDialog in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-3924

The CVE-2026-3924 affects Google Chrome (Chromium) WindowDialog in the renderer, where a use-after-free creates a sandbox-escape risk via a crafted HTML page. Vulnerable versions are before Chrome 146.0.7680.71; mitigation is to update to Chrome 146.0.7680.71 or later. References include Chromium...