CVE-2026-4456
HIGH
apple, google, linux, microsoft
NVD
CVSS Score
8.8
Severity
HIGH
Published
Mar 20, 2026
Vendor
apple, google, linux, microsoft
Description
Use after free in Digital Credentials API in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)