CVE-2026-2441CISA KEV
Google Chromium CSS Use-After-Free Vulnerability
CISA lists this Google Chromium vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Google Chromium CSS contains a use-after-free vulnerability that could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Product
- Chromium
- Added to KEV
- 17 Feb 2026
- Federal remediation due
- 10 Mar 2026
- Known ransomware use
- Not reported