Executive brief
A vulnerability in Google Chrome's Autofill feature on macOS could allow a malicious website to corrupt the browser's memory. If a user visits a specially crafted webpage, an attacker could potentially crash the browser or execute unauthorized code. This poses a risk to the confidentiality and integrity of user data handled within the browser session.
Technical details
A use-after-free (UAF) vulnerability exists in the Autofill component of Google Chrome on macOS. The flaw is triggered when the browser incorrectly manages memory pointers after an object has been deleted, specifically during interactions with crafted HTML content. A remote attacker can exploit this by enticing a user to visit a malicious website, leading to heap corruption. This can result in a browser crash (denial of service) or potentially arbitrary code execution within the context of the browser process. The issue is fixed in version 149.0.7827.115.
Affected products
- Google Chrome prior to 149.0.7827.115
Timeline
- 2026-05-27: disclosed: Reported to Chromium project
- 2026-06-11: patched: Fixed in stable channel update 149.0.7827.115
- 2026-06-11: advisory: NVD publication date