CVE-2026-7897

nvd.nist.gov • May 7, 2026

Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Google Chrome Affecting iOS and Linux Users Two critical vulnerabilities, CVE-2026-7897 and CVE-2026-7898, were published on May 6, 2026. CVE-2026-7897 affects Google Chrome on iOS versions prior to 148.0.7778.96, allowing remote code execution through specific UI gestures on a crafted HTML page. CVE-2026-7898 impacts Google Chrome on Linux, enabling remote code execution via malicious network traffic. Both vulnerabilities are classified as critical by Chromium security standards, indicating a severe risk to users. The vulnerabilities could potentially be exploited by attackers to gain unauthorized access to systems. Users are urged to update their browsers to the latest version to mitigate risks. No specific exploitations have been reported yet, but the severity of these vulnerabilities necessitates immediate attention. 1 sources 73

Extracted Entities

CVE-2026-7897

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

Platforms (1)

Tools (1)