Skip to content
ThreatCluster

Critical Vulnerabilities in Google Chrome Affecting iOS and Linux Users

First seen 7 May 2026, 11:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •May 8, 2026 at 11:08 UTC

Two critical vulnerabilities, CVE-2026-7897 and CVE-2026-7898, were published on May 6, 2026. CVE-2026-7897 affects Google Chrome on iOS versions prior to 148.0.7778.96, allowing remote code execution through specific UI gestures on a crafted HTML page. CVE-2026-7898 impacts Google Chrome on Linux, enabling remote code execution via malicious network traffic. Both vulnerabilities are classified as critical by Chromium security standards, indicating a severe risk to users. The vulnerabilities could potentially be exploited by attackers to gain unauthorized access to systems. Users are urged to update their browsers to the latest version to mitigate risks. No specific exploitations have been reported yet, but the severity of these vulnerabilities necessitates immediate attention.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 162d ago How this analysis works

Timeline

2026-05-06
CVE-2026-7897 published
A use-after-free vulnerability in Google Chrome on iOS was disclosed, allowing remote code execution.
nvd.nist.gov
2026-05-06
CVE-2026-7898 published
A use-after-free vulnerability in Chromoting on Linux was disclosed, enabling remote code execution.
nvd.nist.gov
2026-05-07
Security advisory issued
Users are advised to update Google Chrome to version 148.0.7778.96 or later to mitigate risks.
nvd.nist.gov

More articles in this cluster (4)

Following this threat?

Track CVE-2026-7897 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 3