CVE-2026-2441

HIGH 8.8

⚠️ CISA KEV

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CWE	CWE-416
Vendor	google
Product	chrome
Ecosystems	Browser Android Cloud Chrome
Industries	Technology
Published	Feb 13, 2026
Last Updated	Feb 26, 2026

⚠️ Actively Exploited — Act Now

Get instant alerts for google chrome

This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-2441.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Google / Chrome

145.0.7632.75 < 145.0.7632.75

References

NVD ↗ CVE.org ↗ EPSS Data ↗

chromereleases.googleblog.com: https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html issues.chromium.org: https://issues.chromium.org/issues/483569511 cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-2441 github.com: https://github.com/huseyinstif/CVE-2026-2441-PoC/blob/main/poc.html