Google CVE-2026-5877

This vulnerability exploits a use-after-free condition (CWE-416) in Google Chrome's Navigation subsystem, which manages page loading, frame navigation, and browser history. Use-after-free vulnerabilities occur when the browser attempts to access memory that has already been deallocated, creating a window where an attacker can manipulate memory pointers to redirect execution flow. The Navigation component is a critical part of Chrome's multi-process architecture, handling cross-origin navigation security boundaries and process lifecycle management. While Chrome's sandbox architecture limits the impact of arbitrary code execution by restricting system access, successful exploitation still allows attackers to compromise browser processes, potentially accessing user data within the browser context, manipulating rendered content, or chaining with sandbox escape vulnerabilities. The affected product per CPE is cpe:2.3:a:google:chrome with all versions prior to 147.0.7727.55 vulnerable across Windows, macOS, and Linux platforms.