CVE-2026-9120

Опубликовано: 20 мая 2026

Источник: debian

EPSS Низкий

Описание

Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Пакеты

Пакет	Статус	Версия исправления	Релиз	Тип
chromium	fixed	148.0.7778.178-1		package
chromium	end-of-life		bullseye	package

EPSS

Процентиль: 41%

0.00501

Низкий

Связанные уязвимости

CVE-2026-9120

CVSS3: 8.8

ubuntu

4 месяца назад

Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9120

CVSS3: 9.6

redhat

4 месяца назад

Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9120

CVSS3: 8.8

nvd

4 месяца назад

Use after free in WebRTC in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2026-9120

msrc

4 месяца назад

Chromium: CVE-2026-9120 Use after free in WebRTC

ROS-20260723-80-0060

CVSS3: 8.8

redos

около 2 месяцев назад

Уязвимость chromium

EPSS

Процентиль: 41%

0.00501

Низкий