← Back to CVE search

CVE-2026-9990

Google Chrome

Description

Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

EPSS 0.2%
Published
2026-05-28 23:16:57
View source
Affected versions
<148.0.7778.216
Type
Core software
Last modified
2026-07-21 12:10:00
Operating systems
MacOS