{"id":"CVE-2026-2441","kind":"vulnerability","aliases":["CVE-2026-2441"],"related":[],"title":"Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code…","description":"Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"A use-after-free bug in Chromium's CSS handling lets a remote attacker corrupt heap memory by getting a victim to load a crafted HTML page. Attackers can use this kind of memory corruption to run code inside the browser, and CISA reports it is already being exploited in the wild.","severity":"high","cvss":8.8,"epss":null,"exploited":true,"exploited_at":"2026-02-17T00:00:00+00:00","products":[{"name":"Google Chromium","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"google chrome","fixed":["145.0.7632.75"],"affected":"< 145.0.7632.75","ecosystem":"vendor"},{"name":"google chrome","fixed":["145.0.7632.76"],"affected":"< 145.0.7632.76","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["browser-users","chrome","chromium","edge","exploited","opera","other"],"not_affected_if":["browser-not-chromium-based"],"how_to_check":"Check the installed browser version in chrome://version (or edge://version, opera://version) and compare it against the fixed release named by the vendor.","fix":"Update Google Chrome, Microsoft Edge, Opera and other Chromium-based browsers to the latest stable release that includes the vendor's fix for this CVE.\nFollow CISA's guidance: apply vendor mitigations, or stop using the product if no mitigation is available.","status":"open","published_at":"2026-02-13T19:17:31+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:42:14+00:00","updated_at":"2026-10-23T23:44:51+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-23T20:42:14Z","model":"claude-haiku-5-5","output":{"fix":"Update Google Chrome, Microsoft Edge, Opera and other Chromium-based browsers to the latest stable release that includes the vendor's fix for this CVE.\nFollow CISA's guidance: apply vendor mitigations, or stop using the product if no mitigation is available.","reach":"internet","summary":"A use-after-free bug in Chromium's CSS handling lets a remote attacker corrupt heap memory by getting a victim to load a crafted HTML page. Attackers can use this kind of memory corruption to run code inside the browser, and CISA reports it is already being exploited in the wild.","category":"other","who_cares":["chromium","chrome","edge","opera","browser-users"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs code inside the browser after the victim opens a malicious page.","analyst_note":"Fixed browser version numbers and vendor advisory are not in the sources; check the Chrome Releases blog and the CISA KEV entry for the patched version.","how_to_check":"Check the installed browser version in chrome://version (or edge://version, opera://version) and compare it against the fixed release named by the vendor.\nunknown\nunknown","needs_analyst":true,"not_affected_if":["browser-not-chromium-based"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000495,"input_tokens":2581,"output_tokens":473,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':152C '-2026':21A,24A '-2441':22A,25A '145.0.7632.75':11A '22':151C 'action':142C 'affect':122C 'allow':12A,105C 'alreadi':87B 'appli':143C 'applic':149C 'arbitrari':18A 'attack':15A,54B,68B,108C 'bod':150C 'browser':33B,81B,125C 'browser-us':32B 'bug':45B 'chrome':8A,29A,31A,35B,135C 'chromium':27A,36B,47B,94C,128C 'cisa':83B,140C 'cloud':155C 'code':19A,78B 'contain':96C 'corrupt':55B,75B,113C 'could':104C,121C 'craft':65B,116C 'css':5A,49B,95C 'cve':20A,23A 'discontinu':158C 'edg':37B,137C 'execut':17A 'exploit':38B,89B,111C 'follow':148C 'free':3A,44B,101C 'get':59B 'googl':7A,93C,134C 'google':26A,28A,30A 'guidanc':153C 'handl':50B 'heap':56B,112C 'html':66B,117C 'includ':129C 'insid':79B 'instruct':147C 'kind':72B 'let':51B 'limit':132C 'load':63B 'memori':57B,74B 'microsoft':136C 'mitig':144C,164C 'multipl':123C 'opera':39B,139C 'page':67B,118C 'per':145C 'potenti':110C 'prior':9A 'product':162C 'remot':14A,53B,107C 'report':84B 'requir':141C 'run':77B 'servic':156C 'unavail':166C 'use':1A,42B,70B,99C,159C 'use-after-fre':41B,98C 'user':34B 'util':127C 'vendor':146C 'via':114C 'victim':61B 'vulner':102C,120C 'web':124C 'wild':92B","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-02-13T19:17:31+00:00","kev":{"dateAdded":"2026-02-17","dueDate":"2026-03-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2026-2441","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-2441","severity":null,"published_at":"2026-02-17T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T20:35:31+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-2441","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-2441","severity":null,"published_at":"2026-02-13T19:17:31+00:00","modified_at":"2026-06-17T10:30:57+00:00","first_seen_at":"2026-10-23T23:44:51+00:00","fetched_at":"2026-10-23T23:44:51+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}