CVE-2026-7898

nvd.nist.gov • May 7, 2026

Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Google Chrome Affecting iOS and Linux Users Two critical vulnerabilities, CVE-2026-7897 and CVE-2026-7898, were published on May 6, 2026. CVE-2026-7897 affects Google Chrome on iOS versions prior to 148.0.7778.96, allowing remote code execution through specific UI gestures on a crafted HTML page. CVE-2026-7898 impacts Google Chrome on Linux, enabling remote code execution via malicious network traffic. Both vulnerabilities are classified as critical by Chromium security standards, indicating a severe risk to users. The vulnerabilities could potentially be exploited by attackers to gain unauthorized access to systems. Users are urged to update their browsers to the latest version to mitigate risks. No specific exploitations have been reported yet, but the severity of these vulnerabilities necessitates immediate attention. 1 sources 73

Extracted Entities

CVE-2026-7898

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (2)

Tools (1)