CVE-2026-12452 is a use-after-free vulnerability affecting the Downloads feature in Google Chrome on Android before version 149.0.7827.155. The flaw allows a remote attacker to potentially exploit heap corruption by delivering a specially crafted HTML page. The vulnerability was publicly disclosed with a high severity rating by the Chromium project. Although a vendor advisory URL is provided, it does not explicitly confirm patch availability or remediation status. No known exploits in the wild have been reported at the time of publication.

Successful exploitation of this vulnerability could lead to heap corruption, which may result in arbitrary code execution or browser instability. The impact is considered high severity by the Chromium security team, indicating a significant risk if exploited. However, no active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01750511403.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is confirmed.