Threats Tagged 'cve-2026-15900'

A use-after-free vulnerability exists in the GPU component of Google Chrome on Android versions prior to 150.0.7871.128. This flaw could allow a remote attacker to potentially escape the browser sandbox by convincing a user to visit a crafted HTML page. The vulnerability is classified as critical due to its potential to compromise confidentiality, integrity, and availability.

A use-after-free vulnerability exists in the GPU component of Google Chrome on Android versions prior to 150.0.7871.128. This flaw could allow a remote attacker to potentially escape the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated critical with a high CVSS score of 9.6. A stable channel update addressing this issue is referenced in the vendor advisory.

Multiple security issues affecting chromedriver versions prior to 150.0.7871.128 have been fixed in the chromedriver-150.0.7871.128-1.1 package for openSUSE Tumbleweed. These vulnerabilities include use-after-free (CWE-416) and others, collectively rated with medium severity. The issues are addressed in this updated package, which is available for affected architectures including aarch64 and ppc64le.