CVE-2026-9112

HighCVSS 8.8

Published: 20/05/2026(UTC)Updated: 20/07/2026(UTC)Translated: 21/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

A use-after-free vulnerability in the GPU component of Google Chrome on Windows prior to version 148.0.7778.179 was discovered. A remote attacker can exploit a crafted HTML page to execute arbitrary code within a sandbox.

Risk Assessment

The risk for the organization is remote code execution, which could allow an attacker to compromise the browser and potentially escalate privileges within the system.

Recommendation

Immediately update Google Chrome to version 148.0.7778.179 or later on all Windows systems.

Original NVD description (English source)

Use after free in GPU in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)