Description
Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-05-06
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use‑after‑free flaw in the mobile component of Google Chrome on iOS, allowing the execution of arbitrary code when a user performs specific UI gestures on a crafted HTML page. The flaw requires the attacker to convince the user to interact with a malicious web page that triggers the vulnerability, after which the attacker can run code with the privileges of the browser process.

Affected Systems

Google Chrome for iOS versions earlier than 148.0.7778.96 are affected. The issue is confined to the mobile release of the browser and does not impact other Google Chrome platforms.

Risk and Exploitability

The CVSS score of 7.5 indicates high severity. Chromium labels the issue as critical, however no EPSS score is available and the vulnerability is not currently listed in CISA's KEV catalog. The attack requires user interaction with a malicious web page, indicating that exploitation probability depends on successful phishing or social‑engineering techniques. Once achieved, the attacker can acquire full code execution privileges within the browser context.

Generated by OpenCVE AI on May 7, 2026 at 00:00 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Chrome to the latest version 148.0.7778.96 or newer
  • Avoid interacting with unfamiliar webpages that require touch gestures or other unusual UI actions
  • If updating is not immediately possible, use a different, non‑affected browser on the device

Generated by OpenCVE AI on May 7, 2026 at 00:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6250-1 chromium security update
History

Thu, 07 May 2026 00:30:00 +0000

Type Values Removed Values Added
Title Use-After‑Free Exploit via Crafted iOS Chrome Page

Wed, 06 May 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple iphone Os
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple iphone Os

Wed, 06 May 2026 22:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 06 May 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 06 May 2026 19:45:00 +0000

Type Values Removed Values Added
Title Use-After‑Free Exploit via Crafted iOS Chrome Page

Wed, 06 May 2026 18:30:00 +0000

Type Values Removed Values Added
Description Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Apple Iphone Os
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-05-07T03:56:32.114Z

Reserved: 2026-05-05T22:59:03.403Z

Link: CVE-2026-7897

cve-icon Vulnrichment

Updated: 2026-05-06T20:15:08.962Z

cve-icon NVD

Status : Analyzed

Published: 2026-05-06T19:16:37.990

Modified: 2026-05-06T23:43:15.077

Link: CVE-2026-7897

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-07T00:15:05Z

Weaknesses