CVE-2026-9111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.179

Description A use-after-free flaw exists in WebRTC, the component powering in-browser video and voice calls. A use-after-free is a memory corruption issue that occurs when an application continues to use a pointer after it has been freed. This allows a remote attacker to execute arbitrary code on the system simply by enticing a user to load a specially crafted HTML page, without requiring any downloads or user interaction. Because WebRTC has direct access to the camera, microphone, and network, this flaw could lead to a full system takeover.

Recommendations Update Google Chrome to version 148.0.7778.179 or later and restart the browser to apply the update.