Is CVE-2026-102309 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102309?

CVE-2026-102309 has a CVSS v3 severity of CRITICAL (9.6).

Back

CVE-2026-102309

Description

Use after free in FullScreen in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)