CVE-2026-10888 Security Details

CVE ID

CVE-2026-10888

CWE

CWE-416

CVE Description

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

Published

Jun 5, 2026

CVSS Score & Severity

8.8High

CVSS Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.016%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

googleblog.comPROJECT