PT-2026-38185 · Google · Google Chrome

CVE-2026-7992 · Published 2026-04-02 · Updated 2026-05-22

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 148.0.7778.96 Google Chrome on ChromeOS versions prior to 148.0.7778.96

Description Insufficient validation of untrusted input in the UI allows a remote attacker to execute arbitrary code via a crafted HTML page, provided they can convince a user to perform specific UI gestures.

Recommendations Update Google Chrome on Linux to version 148.0.7778.96 or later. Update Google Chrome on ChromeOS to version 148.0.7778.96 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-07855

CVE-2026-7992

ECHO-2EDD-E9A0-E215

OPENSUSE-SU-2026:10778-1

Affected Products

Google Chrome

References · 141

• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-7992 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-7992 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10778-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07855 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-7992 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-7992 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/732128 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-7992 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-7911 · Note
• https://suse.com/security/cve/CVE-2026-8013 · Note
• https://suse.com/security/cve/CVE-2026-7988 · Note
• https://suse.com/security/cve/CVE-2026-7932 · Note
• https://suse.com/security/cve/CVE-2026-8012 · Note
• https://suse.com/security/cve/CVE-2026-7949 · Note