PT-2026-38150 · Google · Google Chrome

Published 2026-03-26 · Updated 2026-05-14 · CVE-2026-7957

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac and iOS versions prior to 148.0.7778.96

Description An out-of-bounds write issue exists in the Media component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code within a sandbox by using a specially crafted HTML page. An out-of-bounds write occurs when a program writes data past the end of an intended buffer, which can lead to memory corruption.

Recommendations Update Google Chrome on Mac and iOS to version 148.0.7778.96 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2026-07050

CVE-2026-7957

ECHO-7065-F0B1-8DF3

OPENSUSE-SU-2026:10778-1

Affected Products

Google Chrome

References · 138

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-7957 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-7957 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-7957 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10778-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7957 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7957 · Security Note
• https://bdu.fstec.ru/vul/2026-07050 · Security Note
• https://suse.com/security/cve/CVE-2026-8006 · Note
• https://suse.com/security/cve/CVE-2026-8018 · Note
• https://suse.com/security/cve/CVE-2026-7918 · Note
• https://suse.com/security/cve/CVE-2026-7923 · Note
• https://suse.com/security/cve/CVE-2026-7983 · Note
• https://suse.com/security/cve/CVE-2026-7965 · Note
• https://suse.com/security/cve/CVE-2026-8003 · Note