Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3376 articles · 142302 vulns · 36/41 feeds (7d)
← Back to list
8.8
CVE-2026-7898EXPLOITEDPATCHED
google · chrome

CVE-2026-7898: Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbit

Description

Use after free in Chromoting in Google Chrome on Linux prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

Affected Products

VendorProductVersions
googlechrome148.0.7778.96, 148.0.7778.120

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%
linuxlinux_kernelcve_cpe95%

References

  • https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
  • https://issues.chromium.org/issues/504587882

Related News (5 articles)

Tier B
CERT-FR23h ago
Multiples vulnérabilités dans Microsoft Edge (11 mai 2026)
→ No new info (linked only)
Tier A
Microsoft MSRC4d ago
Chromium: CVE-2026-7898 Use after free in Chromoting
→ No new info (linked only)
Tier B
BSI Advisories4d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier D
Heise Security4d ago
Google Chrome: Update auf Version 148 stopft 127 Sicherheitslücken
→ No new info (linked only)
Tier C
VulDB5d ago
CVE-2026-7898 | Google Chrome up to 147.0.7727.138 on Linux Chromoting use after free
→ No new info (linked only)
CVSS 3.18.8 HIGH
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
148.0.7778.96
CWECWE-416
PublishedMay 6, 2026
Last enriched4d agov4
Trending Score66
Source articles5
Independent5
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-7896EXP
CVE-2026-7896: Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap
Trending: 69
CRITICALCVE-2026-7908EXP
CVE-2026-7908: Use after free in Fullscreen in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a
Trending: 65
HIGHCVE-2026-7948EXP
CVE-2026-7948: Race in Chromoting in Google Chrome on Windows prior to 148.0.7778.96 allowed a local attacker to perform privilege esca
Trending: 63
HIGHCVE-2026-7919EXP
CVE-2026-7919: Use after free in Aura in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the rendere
Trending: 63
HIGHCVE-2026-7907EXP
CVE-2026-7907: Use after free in DOM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside
Trending: 63

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
May 6, 2026
Discovered by ZDM
May 6, 2026
Updated: description, affectedVersions, severity, activelyExploited
May 6, 2026
Actively Exploited
May 7, 2026
Exploit Available
May 7, 2026
Patch Available
May 7, 2026
Updated: affectedVersions
May 7, 2026
Updated: exploitAvailable
May 7, 2026

Version History

v4
Last enriched 4d ago
v4Tier A4d ago

Updated vendor to Microsoft and product to Edge, marked exploit as available, and noted no specific patch version available.

exploitAvailable
via Microsoft MSRC
v3Tier D4d ago

Updated description with technical details, added new affected version 148.0.7778.120, changed severity to CRITICAL, and updated patch available version.

affectedVersions
via Heise Security
v2Tier C5d ago

Updated description with more technical detail, changed severity to CRITICAL, and noted that no exploit is available.

descriptionaffectedVersionsseverityactivelyExploited
via VulDB
v15d ago

Initial creation