Back to feed
EUVD-2026-33075 · Published May 28, 2026
Use after free in Input in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Technologies
Linux Linux KernelMicrosoft WindowsGoogle ChromeApple Macos
Weaknesses
CWE-416
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
