PatchGap
Chrome · CredentialProvider

CVE-2026-113011

UAF in CredentialProvider
Medium chrome UAF 🔧 Commit mapped

Overview

Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
ImpactUse after free in CredentialProvider
DescriptionUse after free in CredentialProvider
ComponentCredentialProvider
Bug ClassUAF
Tracker498843754
Fix commitd1a6aa70c02a (chromium/src) +158/-5
CISA KEVNot listed
CreditedGoogle
Disclosed2026-10-20

Files Changed

  • chrome/credential_provider/gaiacp/gaia_credential_base.cc
  • chrome/credential_provider/test/com_fakes.cc
  • chrome/credential_provider/test/gls_runner_test_base.cc
  • chrome/credential_provider/gaiacp/gaia_credential_base_unittest.cc
  • chrome/credential_provider/test/com_fakes.h

Original Bug Report

The reporter's bug is still restricted on the tracker. Chrome de-restricts security bugs ~30–90 days after the fix ships; a later run will backfill it here.
On This Page