Chromium: CVE-2026-3924 Use after free in WindowDialog

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-3924

use after free in WindowDialog in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-3924

A use after free vulnerability exists in the WindowDialog component of Google Chrome and Microsoft Edge (prior to version 146.0.7680.71). An attacker who has already compromised the renderer process can exploit this flaw using a crafted HTML page to potentially achieve a sandbox escape . This vul...