Description
Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Published: 2026-05-28
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use‑after‑free flaw in Chrome’s GPU code on macOS that allows a remote attacker who has already compromised the renderer process to execute arbitrary code. The flaw stems from improper memory handling (CWE‑416) and an additional identified weakness (CWE‑825), giving the attacker full control over the victim’s machine. It has a high severity rating in Chromium’s internal review.

Affected Systems

Google Chrome running on macOS versions before 148.0.7778.216 is affected. Users of earlier Chrome builds on Mac should verify their installed version and upgrade if necessary.

Risk and Exploitability

The CVSS score is 7.5, but the EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack requires a compromised renderer process, which can be achieved by hosting a maliciously crafted page; this makes the threat primarily a crafted‑HTML exploitation scenario rather than a remote network intrusion.

Generated by OpenCVE AI on May 29, 2026 at 13:58 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Install the latest Chrome update (v148.0.7778.216 or later) on all macOS machines.
  • Temporarily disable hardware-accelerated GPU rendering by launching Chrome with the --disable-gpu flag or setting the corresponding enterprise policy until the update is applied.
  • Enforce the Chrome sandbox and site isolation policies to limit the capabilities of renderer processes, ensuring untrusted content runs with least privilege.

Generated by OpenCVE AI on May 29, 2026 at 13:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 29 May 2026 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Fri, 29 May 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome GPU Enables Remote Code Execution chromium-browser: Use after free in GPU
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Important

Fri, 29 May 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 29 May 2026 00:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome GPU Enables Remote Code Execution
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Thu, 28 May 2026 22:45:00 +0000

Type Values Removed Values Added
Description Use after free in GPU in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-416
References

Subscriptions

Apple Macos
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-05-29T11:01:51.643Z

Reserved: 2026-05-28T17:24:51.872Z

Link: CVE-2026-9922

cve-icon Vulnrichment

Updated: 2026-05-29T10:35:56.432Z

cve-icon NVD

Status : Analyzed

Published: 2026-05-28T23:16:50.303

Modified: 2026-05-29T16:46:01.807

Link: CVE-2026-9922

cve-icon Redhat

Severity : Important

Publid Date: 2026-05-27T00:00:00Z

Links: CVE-2026-9922 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-05-29T14:00:20Z

Weaknesses