PatchGap
Chrome · Extensions

CVE-2026-113215

UAF in Extensions
Low chrome UAF

Overview

Low
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
ImpactUse after free in Extensions
DescriptionUse after free in Extensions
ComponentExtensions
Bug ClassUAF
Tracker40092886
CISA KEVNot listed
CreditedDavid Erceg
Disclosed2026-10-20

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
On This Page