EXPOSURES › CVE-2026-10972

CVE-2026-10972

CRITICAL

DETAIL

SourceNVD · cve Published2026-06-04 CVSS9.6 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-10972 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

Google · vendor linux · vendor chrome · product linux kernel · product

DESCRIPTION

Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

AFFECTED FEDRAMP PRODUCTS · 2

PRODUCT	PROVIDER	STATUS	MATCH
Google Services (Google Cloud Platform Products and underlying Infrastructure) Google	Google	Authorized	vendor-exact · 0.90
Google Workspace Google	Google	Authorized	vendor-exact · 0.90