CVE-2026-7976
HighSummary
In Google Chrome prior to version 148.0.7778.96, a use after free vulnerability in Views allowed an attacker to execute arbitrary code via a malicious extension if a user installed it.
Risk Assessment
This vulnerability could lead to remote code execution, posing a significant security risk to users' systems that have installed the malicious extension.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to avoid installing unknown or suspicious extensions.
Other vulnerabilities in Google Chrome Views
See all- CVE-2026-7910Critical
A use after free vulnerability in Views in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.
- CVE-2026-12035High
A use after free vulnerability in Views in Google Chrome on Windows prior to version 149.0.7827.115 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Original NVD description (English source)
Use after free in Views in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Medium)