CVE-2026-7333

CriticalCVSS 9.6

Published: 28/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

Google Chrome prior to version 147.0.7727.138 has a use-after-free vulnerability in the GPU component. A remote attacker can potentially escape the browser sandbox via a crafted HTML page.

Risk Assessment

An attacker can gain full control over the browser process and bypass isolation mechanisms, potentially leading to system compromise.

Recommendation

Update Google Chrome to version 147.0.7727.138 or later.

Original NVD description (English source)

Use after free in GPU in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)