CVE-2026-7910
CriticalSummary
A use after free vulnerability in Views in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.
Risk Assessment
This vulnerability could lead to serious security breaches, allowing attackers to access data from other sites.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Other vulnerabilities in Google Chrome Views
See all- CVE-2026-7976High
In Google Chrome prior to version 148.0.7778.96, a use after free vulnerability in Views allowed an attacker to execute arbitrary code via a malicious extension if a user installed it.
- CVE-2026-12035High
A use after free vulnerability in Views in Google Chrome on Windows prior to version 149.0.7827.115 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Original NVD description (English source)
Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: High)
Vulnerability data from NVD (NIST) · CISA KEV · EPSS