SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-15113

CRITICAL · CVSS 9.6 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-07-08 · Last synced 2026-08-07

CyberRota Analysis

AI-Generated

A use-after-free vulnerability in the Autofill feature of Google Chrome on Android prior to version 150.0.7871.115 allows remote attackers to potentially execute a sandbox escape through a specially crafted HTML page. This critical flaw poses a significant risk to users of affected Android devices, particularly those who utilize Chrome for web browsing. Organizations and individuals relying on Chrome for sensitive transactions should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-15113
Severity
CRITICAL
CVSS
9.6
EPSS
0.20%
Android Chrome

Original NVD Description

Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-91748 HIGH CVE-2026-91747 LOW CVE-2026-91746 MEDIUM CVE-2026-91745 HIGH CVE-2026-91744 MEDIUM CVE-2026-91743 HIGH