CVE-2026-9123

HIGH

Google Chrome < 148.0.7778.179 - Heap-based Buffer Overflow in Chromecast via Malicious Network Traffic

Title source: llm
STIX 2.1

Description

Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: Medium)

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0000
EPSS Percentile 0.1%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-122
Status published
Products (2)
google/chrome < 148.0.7778.179
Google/Chrome 148.0.7778.179
Published May 20, 2026
Tracked Since May 21, 2026