Google Chrome Chromoting Use-After-Free Vulnerability Allowing Remote Code Execution

Vulnerability

A use-after-free vulnerability has been identified in the Chromoting feature of Google Chrome. This issue affects versions prior to 147.0.7727.138 and allows remote attackers to execute arbitrary code by sending malicious network traffic. The vulnerability arises from improper memory management, where the application continues to use a resource after it has been freed, potentially leading to exploitation.

Impact

Exploitation of this vulnerability could result in arbitrary code execution on the victim's machine.

Remediation

Users can update to Google Chrome version 147.0.7727.138 or later to address this vulnerability.

Added: Apr 28, 2026, 11:27 PM
Updated: Apr 28, 2026, 11:27 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
7.5
exploitability
4.1
remediation
7.7
relevance
6.9
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.