Threats tagged 'ghsa-wfg6-jc5r-hcm2'

CVE-2026-95311 is a critical vulnerability in Google Chrome prior to version 154.0.8037.57 involving improper free of non-heap memory in the Fonts component. This flaw allows a remote attacker, through social engineering and a crafted HTML page, to potentially execute arbitrary code outside the sandbox. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. Google has released a stable channel update to address this issue.