PatchSiren cyber security CVE debrief
CVE-2026-12023 Google CVE debrief
CVE-2026-12023 is a Use after free vulnerability in the GPU of Google Chrome on Mac systems. This vulnerability, with a CVSS score of 8.3, could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability was published on [cvePublishedAt] and modified on [cveModifiedAt].
- Vendor
- Product
- Chrome
- CVSS
- HIGH 8.3
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-11
- Original CVE updated
- 2026-06-12
- Advisory published
- 2026-06-11
- Advisory updated
- 2026-06-12
Who should care
Users of Google Chrome on Mac systems prior to version 149.0.7827.115 should apply the update to prevent exploitation of this vulnerability.
Technical summary
The vulnerability is caused by a use-after-free issue in the GPU component of Google Chrome on Mac. This could allow an attacker to execute arbitrary code in the context of the GPU process, potentially leading to a sandbox escape.
Defensive priority
High
Recommended defensive actions
- Update Google Chrome to version 149.0.7827.115 or later.
Evidence notes
Evidence for this CVE comes from the official CVE record and the National Vulnerability Database (NVD).
Official resources
-
CVE-2026-12023 CVE record
CVE.org
-
CVE-2026-12023 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
-
Source reference
[email protected] - Issue Tracking, Permissions Required
CVE-2026-12023 was published on 2026-06-11T22:16:54.817Z and modified on 2026-06-12T18:06:39.950Z.