CVE-2026-7990

HighCVSS 7.8

Published: 06/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

1th percentile - higher than 1% of all known CVEs

Summary

Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to version 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file.

Risk Assessment

An attacker could gain elevated privileges on the system, posing a serious threat to the integrity and security of the operating system.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.

Other vulnerabilities in Google Chrome Updater

CVE-2026-7997High
Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to version 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file.

Original NVD description (English source)

Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS