CVE-2026-9886

CriticalCVSS 9.6

Published: 28/05/2026(UTC)Updated: 21/07/2026(UTC)Translated: 22/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

16th percentile - higher than 16% of all known CVEs

Summary

A Use-After-Free vulnerability in the Base component of Google Chrome on Mac prior to version 148.0.7778.216 was discovered. A remote attacker could exploit a crafted HTML page to potentially perform a sandbox escape.

Risk Assessment

This critical severity vulnerability allows an attacker to execute code outside the browser sandbox, potentially leading to full system compromise.

Recommendation

Immediately update Google Chrome on all Mac systems to version 148.0.7778.216 or later.

Original NVD description (English source)

Use after free in Base in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)