CVE-2026-2313: Poison in RouteMap::UpdateActiveRoutes on 2025-12-09

Q: What is the severity of CVE-2026-2313?

The severity of CVE-2026-2313 is classified as High.

Q: How do I fix CVE-2026-2313?

To fix CVE-2026-2313, update Google Chrome to version 145.0.7632.45 or later.

Q: What kind of vulnerability is CVE-2026-2313?

CVE-2026-2313 is a use-after-free vulnerability in CSS within Google Chrome.

Q: What can attackers do with CVE-2026-2313?

Attackers can potentially exploit CVE-2026-2313 to cause heap corruption via a crafted HTML page.

Q: Which versions of Google Chrome are affected by CVE-2026-2313?

Google Chrome versions prior to 145.0.7632.45 are affected by CVE-2026-2313.

Published Dec 9, 2025

Updated

Chromium: CVE-2026-2313 Use after free in CSS

Other sources

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

— Microsoft

Use after free in CSS in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

— MITRE

Credit

Han Zheng (HexHive)(St), Wenhao Fang (University(St), Qinying Wang (HexHive)

Affected Software

7 affected componentsFixes available

Google Chrome<145.0.7632.45

All of the following

Google Chrome<145.0.7632.45

Any of the following

Apple macOS

Linux Linux kernel

Microsoft Windows

Microsoft Edge (Chromium-based)

Patch available

Microsoft Edge<145.0.3800.58

Event History

Feb 11, 2026

CVE Published

via MITRE·06:08 PM

Data Sourced

via MITRE·06:08 PM

DescriptionWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Feb 18, 2026

Data Sourced

via Microsoft·02:00 AM

DescriptionSeverityWeaknessAffected Software

Updated

via Microsoft·02:00 AM

DescriptionAffected Software

Feb 26, 2026

Data Sourced

12:00 AM

Weakness

Mar 11, 2026

News Published

via BleepingComputer·07:38 PM

Mar 12, 2026

News Published

via BleepingComputer·07:39 PM

Parent advisories

This vulnerability appears in the following advisories.

4684727141213736352

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2026-2313?

The severity of CVE-2026-2313 is classified as High.

How do I fix CVE-2026-2313?

To fix CVE-2026-2313, update Google Chrome to version 145.0.7632.45 or later.

What kind of vulnerability is CVE-2026-2313?

CVE-2026-2313 is a use-after-free vulnerability in CSS within Google Chrome.

What can attackers do with CVE-2026-2313?

Attackers can potentially exploit CVE-2026-2313 to cause heap corruption via a crafted HTML page.

Which versions of Google Chrome are affected by CVE-2026-2313?

Google Chrome versions prior to 145.0.7632.45 are affected by CVE-2026-2313.

CVE-2026-2313: Poison in RouteMap::UpdateActiveRoutes on 2025-12-09

Other sources

Credit

Affected Software

Event History

Parent advisories

Peer vulnerabilities

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2026-2313?

How do I fix CVE-2026-2313?

What kind of vulnerability is CVE-2026-2313?

What can attackers do with CVE-2026-2313?

Which versions of Google Chrome are affected by CVE-2026-2313?

Company

Resources

Contact