PatchGap
Chrome · Paint

CVE-2026-118353

UAF in Paint
High chrome UAF 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
ImpactUse after free in Paint
DescriptionUse after free in Paint
ComponentPaint
Bug ClassUAF
Tracker572312175
Fix commit25df6183505d (chromium/src) +50/-2
CISA KEVNot listed
CreditedAnthropic and Ada Logics
Disclosed2026-10-27

Files Changed

  • third_party/blink/renderer/core/css/style_image_cache.cc
  • third_party/blink/renderer/core/css/style_image_cache_test.cc

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
On This Page