PT-2026-38185

CVE-2026-7992

Published

2026-04-02

Updated

2026-08-31

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 148.0.7778.96 Google Chrome on ChromeOS versions prior to 148.0.7778.96

Description Insufficient validation of untrusted input in the UI allows a remote attacker to execute arbitrary code via a crafted HTML page, provided they can convince a user to perform specific UI gestures.

Recommendations Update Google Chrome on Linux to version 148.0.7778.96 or later. Update Google Chrome on ChromeOS to version 148.0.7778.96 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2026-7992

BDU:2026-07855

ECHO-2EDD-E9A0-E215

OPENSUSE-SU-2026:10778-1