CVE-2026-7997

HighCVSS 7.8

Published: 06/05/2026(UTC)Updated: 26/10/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.08%

0th percentile - higher than 0% of all known CVEs

Summary

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to version 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file.

Risk Assessment

An attacker could gain elevated privileges on the system, potentially leading to serious security breaches.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Google Chrome Updater

CVE-2026-7990High
Insufficient validation of untrusted input in Updater in Google Chrome on Windows prior to version 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file.

Original NVD description (English source)

Insufficient validation of untrusted input in Updater in Google Chrome on Mac prior to 148.0.7778.96 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Low)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS