CVE-2026-15120
Possible ATT&CK Techniques 3AI
T1055 · Process Injection T1068 · Exploitation for Privilege Escalation T1203 · Exploitation for Client ExecutionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-15120
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Use after free in Core in Google Chrome on Windows prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
释放后使用
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-15120
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15120
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-15120 (1)
Security Blog Posts for CVE-2026-15120 (1)
Same Patch Batch · Google · 2026-07-08 · 27 CVEs total
| CVE-2026-15118 | Chrome低于150.0.7871.115输入后使用释放漏洞 | |
| CVE-2026-15132 | Chrome <150.0.7871.115 V8未初始化使用致任意代码执行 | |
| CVE-2026-15112 | Chrome <150.0.7871.115 Ozone堆损坏漏洞 | |
| CVE-2026-15129 | Chrome <150.0.7871.115 Views类型Use-After-Free导致远程执行漏洞 | |
| CVE-2026-15133 | Chrome < 150.0.7871.115 使用释放漏洞可远程代码执行 | |
| CVE-2026-15108 | Chrome<150.0.7871.115 扩展 API 整数溢出致内存越界读取 | |
| CVE-2026-15109 | Chrome<150.0.7871.115 ANGLE未初始化使用导致信息泄露 | |
| CVE-2026-15110 | Chrome <150.0.7871.115 扩展程序释放后使用漏洞 | |
| CVE-2026-15111 | Google Chrome低于150.0.7871.115版本Views模块存在使用后释放漏洞 | |
| CVE-2026-15114 | Chrome <150.0.7871.115 编解码器越界读写漏洞 | |
| CVE-2026-15115 | Google Chrome Android <150.0.7871.115 同源策略绕过漏洞 | |
| CVE-2026-15113 | Chrome <150.0.7871.115 自动填充越界释放致沙箱逃逸 | |
| CVE-2026-15116 | Chrome 150.0.7871.115前存在Actor Use-After-Free漏洞，可致任意代码执行 | |
| CVE-2026-15131 | Chrome <150.0.7871.115导航实现不当致隔离绕过 | |
| CVE-2026-15117 | Chrome 150.0.7871.115 前版本支付模块 UAF 漏洞 | |
| CVE-2026-15121 | Google Chrome <150.0.7871.115 WebRTC释放后使用漏洞 | |
| CVE-2026-15119 | Chrome <150.0.7871.115 竞争条件漏洞 | |
| CVE-2026-15123 | Chrome < 150.0.7871.115 DOM堆溢出漏洞 | |
| CVE-2026-15122 | Chrome<150.0.7871.115代码编解码器输入验证不足漏洞 | |
| CVE-2026-15124 | Chrome <150.0.7871.115同源策略绕过漏洞 |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2026-15120
No comments yet