CVE-2026-9117
High
Published: 20 May 2026
Published
20 May 2026
Modified
20 May 2026
KEV Added
—
Patch
—
CVSS Score
7.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-9117 is a high-severity Type Confusion (CWE-843) vulnerability in Chromium (inferred from references). Its CVSS base score is 7.5 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
Affected Products
Chromium
—
inferred from references and description; NVD did not file a CPE for this CVE
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-31165