CVE-2026-9117
HighSummary
A Type Confusion vulnerability in GFX in Google Chrome on Linux and ChromeOS prior to version 148.0.7778.179 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted video file.
Risk Assessment
This vulnerability poses a risk to organizations by allowing attackers to potentially take control of the system through a malicious video file.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)