CVE-2026-7333

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.138

Description A use after free (a condition where a program continues to use a memory address after it has been freed) in the GPU component allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This occurs when modifying the surface activation group vector while iterating through existing entries.

Recommendations Update to version 147.0.7727.138 or later.