Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...

zetlyn/cve-ghsa vulnerability ghsa GHSA-fcf3-fgrp-9hp7 cve CVE-2026-102316 known 2026-09-29

https://github.com/advisories/GHSA-fcf3-fgrp-9hp7

Properties

cvss

cvss	9.6 receipt Source GitHub advisories Its words `9.6` Read by `field:cvss.score` Said since 2026-10-02 11:59 UTC Last answered 2026-10-06 13:46 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-102316", "cvss": { "score": 9.6, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, "cvss_severities": { "cvss_v3": { "score": 9.6, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-416", "name": "Use After Free" } ], "description": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "epss": { "percentage": 0.0031, "percentile": 0.21611 }, "ghsa_id": "GHSA-fcf3-fgrp-9hp7", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7", "identifiers": [ { "type": "GHSA", "value": "GHSA-fcf3-fgrp-9hp7" }, { "type": "CVE", "value": "CVE-2026-102316" } ], "nvd_published_at": "2026-09-29T20:17:14Z", "published_at": "2026-09-29T21:33:24Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-102316", "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html", "https://issues.chromium.org/issues/560238698", "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7" ], "repository_advisory_url": null, "severity": "critical", "source_code_location": "", "summary": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...", "type": "unreviewed", "updated_at": "2026-09-29T21:33:25Z", "url": "https://api.github.com/advisories/GHSA-fcf3-fgrp-9hp7", "vulnerabilities": [], "withdrawn_at": null }
cwe	CWE-416 receipt Source GitHub advisories Its words `CWE-416` Read by `field:cwes[].cwe_id` Said since 2026-10-02 11:59 UTC Last answered 2026-10-06 13:46 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-102316", "cvss": { "score": 9.6, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, "cvss_severities": { "cvss_v3": { "score": 9.6, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-416", "name": "Use After Free" } ], "description": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "epss": { "percentage": 0.0031, "percentile": 0.21611 }, "ghsa_id": "GHSA-fcf3-fgrp-9hp7", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7", "identifiers": [ { "type": "GHSA", "value": "GHSA-fcf3-fgrp-9hp7" }, { "type": "CVE", "value": "CVE-2026-102316" } ], "nvd_published_at": "2026-09-29T20:17:14Z", "published_at": "2026-09-29T21:33:24Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-102316", "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html", "https://issues.chromium.org/issues/560238698", "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7" ], "repository_advisory_url": null, "severity": "critical", "source_code_location": "", "summary": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...", "type": "unreviewed", "updated_at": "2026-09-29T21:33:25Z", "url": "https://api.github.com/advisories/GHSA-fcf3-fgrp-9hp7", "vulnerabilities": [], "withdrawn_at": null }
severity	critical GitHub's own rating, from the CVSS base score at 9.0 and above. receipt Source GitHub advisories Its words `critical` Read by `field:severity` Said since 2026-10-02 11:59 UTC Last answered 2026-10-06 13:46 UTC Original open at the source What the source handed over { "credits": [], "cve_id": "CVE-2026-102316", "cvss": { "score": 9.6, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, "cvss_severities": { "cvss_v3": { "score": 9.6, "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" }, "cvss_v4": { "score": 0.0, "vector_string": null } }, "cwes": [ { "cwe_id": "CWE-416", "name": "Use After Free" } ], "description": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)", "epss": { "percentage": 0.0031, "percentile": 0.21611 }, "ghsa_id": "GHSA-fcf3-fgrp-9hp7", "github_reviewed_at": null, "html_url": "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7", "identifiers": [ { "type": "GHSA", "value": "GHSA-fcf3-fgrp-9hp7" }, { "type": "CVE", "value": "CVE-2026-102316" } ], "nvd_published_at": "2026-09-29T20:17:14Z", "published_at": "2026-09-29T21:33:24Z", "references": [ "https://nvd.nist.gov/vuln/detail/CVE-2026-102316", "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html", "https://issues.chromium.org/issues/560238698", "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7" ], "repository_advisory_url": null, "severity": "critical", "source_code_location": "", "summary": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...", "type": "unreviewed", "updated_at": "2026-09-29T21:33:25Z", "url": "https://api.github.com/advisories/GHSA-fcf3-fgrp-9hp7", "vulnerabilities": [], "withdrawn_at": null }

9.6

receipt

Source: GitHub advisories
Its words: 9.6
Read by: field:cvss.score
Said since: 2026-10-02 11:59 UTC
Last answered: 2026-10-06 13:46 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-102316",
  "cvss": {
    "score": 9.6,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 9.6,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-416",
      "name": "Use After Free"
    }
  ],
  "description": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
  "epss": {
    "percentage": 0.0031,
    "percentile": 0.21611
  },
  "ghsa_id": "GHSA-fcf3-fgrp-9hp7",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-fcf3-fgrp-9hp7"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-102316"
    }
  ],
  "nvd_published_at": "2026-09-29T20:17:14Z",
  "published_at": "2026-09-29T21:33:24Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-102316",
    "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html",
    "https://issues.chromium.org/issues/560238698",
    "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7"
  ],
  "repository_advisory_url": null,
  "severity": "critical",
  "source_code_location": "",
  "summary": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...",
  "type": "unreviewed",
  "updated_at": "2026-09-29T21:33:25Z",
  "url": "https://api.github.com/advisories/GHSA-fcf3-fgrp-9hp7",
  "vulnerabilities": [],
  "withdrawn_at": null
}

cwe

CWE-416

receipt

Source: GitHub advisories
Its words: CWE-416
Read by: field:cwes[].cwe_id
Said since: 2026-10-02 11:59 UTC
Last answered: 2026-10-06 13:46 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-102316",
  "cvss": {
    "score": 9.6,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 9.6,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-416",
      "name": "Use After Free"
    }
  ],
  "description": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
  "epss": {
    "percentage": 0.0031,
    "percentile": 0.21611
  },
  "ghsa_id": "GHSA-fcf3-fgrp-9hp7",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-fcf3-fgrp-9hp7"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-102316"
    }
  ],
  "nvd_published_at": "2026-09-29T20:17:14Z",
  "published_at": "2026-09-29T21:33:24Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-102316",
    "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html",
    "https://issues.chromium.org/issues/560238698",
    "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7"
  ],
  "repository_advisory_url": null,
  "severity": "critical",
  "source_code_location": "",
  "summary": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...",
  "type": "unreviewed",
  "updated_at": "2026-09-29T21:33:25Z",
  "url": "https://api.github.com/advisories/GHSA-fcf3-fgrp-9hp7",
  "vulnerabilities": [],
  "withdrawn_at": null
}

severity

critical

GitHub's own rating, from the CVSS base score at 9.0 and above.

receipt

Source: GitHub advisories
Its words: critical
Read by: field:severity
Said since: 2026-10-02 11:59 UTC
Last answered: 2026-10-06 13:46 UTC
Original: open at the source

What the source handed over

{
  "credits": [],
  "cve_id": "CVE-2026-102316",
  "cvss": {
    "score": 9.6,
    "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
  },
  "cvss_severities": {
    "cvss_v3": {
      "score": 9.6,
      "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
    },
    "cvss_v4": {
      "score": 0.0,
      "vector_string": null
    }
  },
  "cwes": [
    {
      "cwe_id": "CWE-416",
      "name": "Use After Free"
    }
  ],
  "description": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)",
  "epss": {
    "percentage": 0.0031,
    "percentile": 0.21611
  },
  "ghsa_id": "GHSA-fcf3-fgrp-9hp7",
  "github_reviewed_at": null,
  "html_url": "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7",
  "identifiers": [
    {
      "type": "GHSA",
      "value": "GHSA-fcf3-fgrp-9hp7"
    },
    {
      "type": "CVE",
      "value": "CVE-2026-102316"
    }
  ],
  "nvd_published_at": "2026-09-29T20:17:14Z",
  "published_at": "2026-09-29T21:33:24Z",
  "references": [
    "https://nvd.nist.gov/vuln/detail/CVE-2026-102316",
    "https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01807488085.html",
    "https://issues.chromium.org/issues/560238698",
    "https://github.com/advisories/GHSA-fcf3-fgrp-9hp7"
  ],
  "repository_advisory_url": null,
  "severity": "critical",
  "source_code_location": "",
  "summary": "Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...",
  "type": "unreviewed",
  "updated_at": "2026-09-29T21:33:25Z",
  "url": "https://api.github.com/advisories/GHSA-fcf3-fgrp-9hp7",
  "vulnerabilities": [],
  "withdrawn_at": null
}

Text

Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker... Use after free in Views in Google Chrome prior to 154.0.8037.92 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)