HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-7927 — Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remo...

·Source: NIST NVD

Updated:

Executive Summary

Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Analysis

Type Confusion in Runtime in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) CVSS Score: 8.8. Published: 2026-05-06T19:16:41.037.

Indicators of Compromise (1)

CVE (1)
CVE-2026-7927
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on May 6, 2026. Verified by: NIST.

Related Threats

CRITICALAi

Patch Tuesday - May 2026

Microsoft is publishing 137 vulnerabilities on May 2026 Patch Tuesday . Microsoft is not aware of exploitation in the wild or public disclosure for any of these vulnerabilities. So far this month, Microsoft has provided patches to address 133 browser vulnerabilities, which are not included in the Patch Tuesday count above. Windows Netlogon: critical RCE Anyone responsible for securing a domain con

CVE-2026-41089CVE-2020-1472
Rapid7
LOWAi

How Claude Code’s 256KB blind spot put developers’ secrets in the preview pane

Simply asking Anthropic’s Claude Code to review an HTML file could hand attackers access to a developer’s machine, cloud credentials and software development environment, according to a new Noma Security finding. Noma’s researchers found a vulnerability affecting Anthropic’s Claude Code Desktop app that could allow malicious JavaScript embedded in an HTML file to execute without further user inter

CSO Online
HIGHVulnerability

NVD HIGH: CVE-2026-110144 — Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.80...

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: High)

CVE-2026-110144
NIST NVD