CVE-2026-12445 is a use-after-free vulnerability in the Extensions subsystem of Google Chrome before version 149.0.7827.155. An attacker could exploit this by tricking a user into installing a crafted malicious Chrome extension, potentially leading to heap corruption. The vulnerability is rated high severity by Chromium security and has a CVSS 3.1 base score of 7.5, indicating high impact on confidentiality, integrity, and availability. There is no explicit vendor advisory text on patch status in the provided data, but the affected version is prior to 149.0.7827.155, implying that updating to this version or later addresses the issue.

Successful exploitation could lead to heap corruption, which may allow an attacker to execute arbitrary code or cause denial of service within the context of the affected Chrome browser. The attack requires user interaction in the form of installing a malicious extension. The vulnerability impacts confidentiality, integrity, and availability as indicated by the CVSS vector.

Users and administrators should update Google Chrome to version 149.0.7827.155 or later to remediate this vulnerability. The vendor advisory linked indicates this is a stable channel update addressing the issue. No additional mitigation steps are specified or required beyond applying the update.