CVE-2026-7978

HighCVSS 8.1

Published: 06/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

15th percentile - higher than 15% of all known CVEs

Summary

Inappropriate implementation in Companion in Google Chrome on Mac prior to version 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic.

Risk Assessment

An attacker could gain elevated privileges on the system, potentially leading to serious security breaches and data loss.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Google Chrome on Mac

CVE-2026-8002High
A use after free vulnerability in Audio in Google Chrome on Mac prior to version 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Original NVD description (English source)

Inappropriate implementation in Companion in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to perform OS-level privilege escalation via malicious network traffic. (Chromium security severity: Medium)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS