VULNERABILITY INTELLIGENCE

CVE-2026-7338

CVSS score7.5 HIGH
EPSS probability0.15%
CISA KEVNot currently listed
Published2026-04-28
Last modified2026-07-24
CVSS vectorCVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

Weakness classification

  • chrome-cve-admin@google.com: CWE-416

Primary references