PT-2026-38089 · Google+1 · Google Chrome+1

C6Eed09Fc8B174B0F3Eebedcceb1E792 · CVE-2026-7896 · Published 2026-03-18 · Updated 2026-07-22

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Microsoft Edge (affected versions not specified)

Description An integer overflow exists in the Blink rendering engine, which is used by Google Chrome and Microsoft Edge. A remote attacker can exploit this flaw by using a crafted HTML page to trigger heap corruption, potentially leading to a denial of service or code execution.

Recommendations Update to version 148.0.7778.96 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

RCE

Weakness Enumeration

CWE-472

Related Identifiers

BDU:2026-07418

CVE-2026-7896

ECHO-A60A-21F6-32A1

OPENSUSE-SU-2026:10778-1

Affected Products

Google Chrome

Red Os

References · 153

• https://osv.dev/vulnerability/openSUSE-SU-2026:10778-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/732102 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-7896 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07418 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-7896 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-7896 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7896 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7896 · Security Note
• https://suse.com/security/cve/CVE-2026-7930 · Note
• https://suse.com/security/cve/CVE-2026-7982 · Note
• https://suse.com/security/cve/CVE-2026-7960 · Note
• https://suse.com/security/cve/CVE-2026-7959 · Note
• https://suse.com/security/cve/CVE-2026-7915 · Note
• https://suse.com/security/cve/CVE-2026-7924 · Note