PT-2026-42241 · Google · Google Chrome

David Korczynski · Published 2026-05-19 · Updated 2026-05-22 · CVE-2026-9121

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.179

Description An out of bounds read in the GPU component allows a remote attacker to potentially exploit heap corruption through the use of a crafted HTML page. Heap corruption occurs when a program writes data outside the boundaries of the allocated memory on the heap, which can lead to crashes or arbitrary code execution.

Recommendations Update to version 148.0.7778.179 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-9121

ECHO-48BB-6383-BA42

OPENSUSE-SU-2026:10841-1

Affected Products

Google Chrome

References · 28

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-9121 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-9121 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-9121 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10841-1 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9121 · Security Note
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html · Vendor Advisory
• https://t.me/CVEtracker/54429 · Telegram Post
• https://suse.com/security/cve/CVE-2026-9111 · Note
• https://suse.com/security/cve/CVE-2026-9120 · Note
• https://suse.com/security/cve/CVE-2026-9122 · Note
• https://crbug.com/488064108 · Note
• https://twitter.com/VulmonFeeds/status/2057226699155136725 · Twitter Post
• https://t.me/cveNotify/164407 · Telegram Post
• https://suse.com/security/cve/CVE-2026-9112 · Note
• https://suse.com/security/cve/CVE-2026-9124 · Note