CVE-2026-4680

CVE-2026-4680 is a use-after-free in Chrome’s FedCM that allows remote code execution inside the sandbox via a crafted HTML page, before version 146.0.7680.165. The vulnerability affects Chrome, with a CVSS 3.1 base score of 8.8 (High) and requires user interaction (UI: Required) with network att...