What the vulnerability does

01Description

Use after free in QUIC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)

Key dates

02Disclosure timeline

May 20, 2026 CVE published
May 21, 2026 Record updated

Related vulnerabilities

04Related CVE