CVE-2026-9111

CVSS 3.1: 8.8 high
EPSS: <1%p54
Published: May 20, 2026 · May 20, 2026
Modified: Jul 20, 2026

Analyze CVE-2026-9111 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use after free in WebRTC in Google Chrome on Linux prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

Vendors: google

Products: chrome

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news

1 story

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026MalwareExploitedCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+311 · 1 read