CVE-2026-102306: Use-after-free in Google Chrome Bluetooth allows sandbox escape · ZeroHour

CVE-2026-102306

mass

Use-after-free in Google Chrome Bluetooth allows sandbox escape

CVSS 3.1

9.6 critical

EPSS

—

Published

Sep 29, 2026 (1d ago)

Modified

Sep 30, 2026

AI analysis

A use-after-free flaw (CWE-416) in the Bluetooth component of Google Chrome lets a remote attacker potentially run arbitrary code outside the browser sandbox. It is triggered when a user opens a crafted HTML page, so no prior privileges are required but user interaction is. Successful exploitation can compromise confidentiality, integrity, and availability of the host beyond the sandbox, and Google rates the issue High while the CVSS 3.1 score is 9.6 critical. Every Google Chrome installation older than 154.0.8037.92 is affected. There is no known public proof-of-concept and the vulnerability is not listed in CISA KEV, so exploitation is none known at this time.

What to do: Update Google Chrome to version 154.0.8037.92 or later on all devices, then confirm the running build at chrome://version. Until the update is applied, avoid opening untrusted or unexpected web pages, since exploitation requires a user to load crafted HTML.

Affected

Google Chrome

prior to 154.0.8037.92

Estimated exposure

masson the order of 1 billion+ Chrome installations potentially affected before update — Google Chrome is the dominant desktop browser with a multi-billion global user base, and every installation still running a build before 154.0.8037.92 is in scope; auto-update reduces the remaining unpatched set over time but does not…

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description

Use after free in Bluetooth in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vendors: google
Products: chrome
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (—)

CVE-2026-102306

In the news1 stories

Google Chrome 154 Update Fixes 32 Security Flaws Including Critical ANGLE Bug