PT-2026-35833 · Google+1 · Google Chrome+1

C6Eed09Fc8B174B0F3Eebedcceb1E792 · CVE-2026-7333 · Published 2026-03-19 · Updated 2026-07-24

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.138

Description A use after free (a condition where a program continues to use a memory address after it has been freed) in the GPU component allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This occurs when modifying the surface activation group vector while iterating through existing entries.

Recommendations Update to version 147.0.7727.138 or later.

Fix

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-07082

CVE-2026-7333

ECHO-86E7-62A2-45FC

OPENSUSE-SU-2026:10689-1

Affected Products

Google Chrome

Red Os

References · 49

• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0723SE18HF · Vendor Advisory
• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_28.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-7333 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10689-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-7333 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07082 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/731948 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-7333 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-7341 · Note
• https://redos.red-soft.ru/support/secure · Note
• https://suse.com/security/cve/CVE-2026-7334 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-chromium-cve-2026-7333-8.0 · Note
• https://suse.com/security/cve/CVE-2026-7336 · Note
• https://suse.com/security/cve/CVE-2026-7340 · Note
• https://suse.com/security/cve/CVE-2026-7351 · Note