PT-2026-42243 · Google · Google Chrome

Published 2026-05-20 · Updated 2026-05-22 · CVE-2026-9123

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.179 Google Chrome on Linux versions prior to 148.0.7778.179 Google Chrome on ChromeOS versions prior to 148.0.7778.179

Description A heap buffer overflow in the Chromecast component allows a local attacker to execute arbitrary code within a sandbox by sending malicious network traffic. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially overwriting adjacent memory.

Recommendations Update Google Chrome on Android to version 148.0.7778.179 or later. Update Google Chrome on Linux to version 148.0.7778.179 or later. Update Google Chrome on ChromeOS to version 148.0.7778.179 or later.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-9123

OPENSUSE-SU-2026:10841-1

Affected Products

Google Chrome

References · 27

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9123 · Security Note
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0841193308.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-9123 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-9123 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10841-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-9123 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-9115 · Note
• https://suse.com/security/cve/CVE-2026-9124 · Note
• https://twitter.com/VulmonFeeds/status/2057221579163992291 · Twitter Post
• https://t.me/CVEtracker/54431 · Telegram Post
• https://suse.com/security/cve/CVE-2026-9122 · Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-9123 · Note
• https://suse.com/security/cve/CVE-2026-9111 · Note
• https://issues.chromium.org/issues/495988507 · Note
• https://suse.com/security/cve/CVE-2026-9116 · Note