๐Ÿ” CVE Alert

CVE-2026-9123

HIGH 7.5
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th

Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: Medium)

CWE CWE-122
Vendor google
Product chrome
Ecosystems
Industries
Technology
Published May 20, 2026
Last Updated May 20, 2026
Stay Ahead of the Next One

Get instant alerts for google chrome

Be the first to know when new high vulnerabilities affecting google chrome are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Google / Chrome
148.0.7778.179 < 148.0.7778.179

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
chromereleases.googleblog.com: https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html issues.chromium.org: https://issues.chromium.org/issues/495988507