CVE-2026-9119
High
Published: 20 May 2026
Published
20 May 2026
Modified
20 May 2026
KEV Added
—
Patch
—
CVSS Score
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
18
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-9119 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Chromium (inferred from references). Its CVSS base score is 8.8 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
Heap buffer overflow in WebRTC in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
Affected Products
Chromium
—
inferred from references and description; NVD did not file a CPE for this CVE
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-31167