Vulnerability Details CVE-2026-6319
Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Medium)
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 23.6%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-6319
-
cpe:2.3:a:google:chrome:38.0.2125.101
-
cpe:2.3:a:google:chrome:40.0.2214.109
-
cpe:2.3:a:google:chrome:40.0.2214.89
-
cpe:2.3:a:google:chrome:42.0.2311.107
-
cpe:2.3:a:google:chrome:54.0.2840.68
-
cpe:2.3:a:google:chrome:83.0.4103.106