CVE-2026-85048
HIGH 8.3EPSS 0.4%
Use after free in Compositing in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- Affected
- Google · Chrome
- CVSS v3.1 CNA
- 8.3 HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - EPSS
- 0.40% chance of exploitation in the next 30 days, 33rd percentile
- Published
- 2026-09-03
- Updated
- 2026-09-04
Proof-of-concept exploits (1)
- SneakyNachos/CVE-2026-85048-the-gpu-died1★ · 2026-09-17