CVE-2026-9890

Use after free in XR in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-9118

A Use after free vulnerability exists in the XR component of Google Chrome on Windows (prior to version 148.0.7778.179 ). The flaw stems from a resource management error where XR objects are reused after their release, potentially allowing a remote attacker to execute arbitrary code via a crafted...

PT-2026-42238

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.179 Description A use after free issue in XR Extended Reality allows a remote attacker to execute arbitrary code via a crafted HTML page. Recommendations Update to version 148.0.7778.179 or later...