Description
Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-05-06
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

This vulnerability is a type confusion error in Chrome’s runtime that allows a remote attacker to execute arbitrary code inside the browser’s sandbox by loading a specially crafted HTML page. The flaw is caused by improper type handling (CWE‑843) and is reported as a high‑severity issue by Chromium.

Affected Systems

Google Chrome versions prior to 148.0.7778.96 on all platforms supported by the stable channel are affected. An attacker can target any user running an affected build by visiting a malicious webpage.

Risk and Exploitability

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The Chromium severity is High, indicating that the defect is serious. The CVSS score of 8.8 confirms a high severity rating. Based on the description, the attack vector appears to be a crafted HTML page delivered over the network, so it is inferred that the vulnerability can be exploited remotely, although an explicit likelihood assessment is not provided.

Generated by OpenCVE AI on May 7, 2026 at 01:06 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply Chrome version 148.0.7778.96 or newer, which fixes the type‑confusion issue.
  • Ensure that Chrome’s automatic update feature is enabled to receive future patches promptly.
  • Block or restrict access to known malicious sites until all users are updated.

Generated by OpenCVE AI on May 7, 2026 at 01:06 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6250-1 chromium security update
History

Thu, 07 May 2026 01:30:00 +0000

Type Values Removed Values Added
Title Runtime Type Confusion in Chrome Allows Remote Code Execution via Crafted HTML

Wed, 06 May 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Wed, 06 May 2026 22:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 06 May 2026 21:45:00 +0000

Type Values Removed Values Added
Title Runtime Type Confusion in Chrome Allows Remote Code Execution via Crafted HTML

Wed, 06 May 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 06 May 2026 18:30:00 +0000

Type Values Removed Values Added
Description Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-843
References

Subscriptions

Apple Macos
Google Chrome
Linux Linux Kernel
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-05-07T03:56:27.693Z

Reserved: 2026-05-05T22:59:11.400Z

Link: CVE-2026-7927

cve-icon Vulnrichment

Updated: 2026-05-06T20:08:57.836Z

cve-icon NVD

Status : Analyzed

Published: 2026-05-06T19:16:41.037

Modified: 2026-05-06T23:37:29.700

Link: CVE-2026-7927

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-07T01:15:17Z

Weaknesses