Remote Code Execution Vulnerability in Google Chrome for Linux and ChromeOS
CVE-2026-7992

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
6 May 2026

What is CVE-2026-7992?

A vulnerability exists in Google Chrome for Linux and ChromeOS due to insufficient validation of untrusted input in the user interface. This weakness can be exploited by remote attackers who lead users to perform specific UI gestures, allowing them to execute arbitrary code through a specially crafted HTML page. Users are advised to update to version 148.0.7778.96 or later to mitigate the risk associated with this vulnerability.

Affected Version(s)

Chrome 148.0.7778.96

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.