CVE-2026-7921

Description

Use after free in Passwords in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

References

https://issues.chromium.org/issues/499062376

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-27945

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html

Details

Source: Mitre, NVD

Named Vulnerability: GHSA-gh29-cxwr-w3m3

Risk Information

CVSS v2

CVSS v3

EPSS