
Exploit for CVE-2026-2441, a use-after-free in Google Chrome's CSS engine, enabling remote code execution via crafted HTML pages. Includes Python exploit script for testing.
A HIGH vulnerability, classified as CVE-2026-2441, has been identified, categorized under CWE-416, CWE-416, (CVSS 8.8). Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in CSS in Google Chrome prior to 145.0.7632.75 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Google Chrome:
To run exploit you need Python 3.9. Execute:
python exploit.py -h 10.10.10.10 -c 'uname -a'
For inquiries, please contact [email protected]