8.8 HighCWE-416
CVE-2026-7344
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.3%probability of exploitation in the next 30 days
Higher than 23% of scored CVEs
SeverityCVSS
8.8High
Description NVD
Use after free in Accessibility in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Coverage 1 article · 1 outlet
- Chrome 147 and Firefox 150 patch critical memory safety flawsSecurityWeek · first in our coverage · mentions it in passing