PT-2026-44596

CVE-2026-9887

Published

2026-05-17

Updated

2026-09-09

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216

Description A use after free issue exists in the Proxy component. This allows a remote attacker to execute arbitrary code by utilizing a specially crafted PAC (Proxy Auto-Config) script, which is a configuration file used by browsers to determine which proxy server to use for a specific URL.

Recommendations Update to version 148.0.7778.216 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers

CVE-2026-9887

BDU:2026-11117

ECHO-0DA4-5BBD-F6A4