Local Privilege Escalation Vulnerability in Google Chrome for Windows
CVE-2026-7990

Currently unrated

Key Information:

Vendor: Google
Status: Chrome
Vendor: CVE Published:; 6 May 2026

What is CVE-2026-7990?

A vulnerability in the Updater component of Google Chrome for Windows allows local attackers to leverage insufficient validation of untrusted input. This flaw can lead to OS-level privilege escalation through the execution of a malicious file. Users are encouraged to update to the latest version to mitigate potential risks.

Affected Version(s)

Chrome 148.0.7778.96

References

https://chromereleases.googleblog.com/2026/05/stable-chan...

https://issues.chromium.org/issues/498892267

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
May 6, 2026
Vulnerability Reserved
May 5, 2026

CVE-2026-7990 Data

JSON