CVE-2026-9111

HighCVSS 8.8

Published: 20/05/2026(UTC)Updated: 20/07/2026(UTC)Translated: 21/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.80%

52th percentile - higher than 52% of all known CVEs

Summary

A critical Use-After-Free vulnerability in the WebRTC component of Google Chrome on Linux prior to version 148.0.7778.179 allows a remote attacker to execute arbitrary code via a crafted HTML page.

Risk Assessment

An attacker can take control of the user's system, steal data, or install malware without any interaction beyond visiting a malicious page.

Recommendation

Immediately update Google Chrome to version 148.0.7778.179 or later on all Linux systems. Consider implementing policies to block unknown HTML pages.

Original NVD description (English source)

Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)