CVE-2026-9123
High
Published: 20 May 2026
Published
20 May 2026
Modified
20 May 2026
KEV Added
—
Patch
—
CVSS Score
7.5
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
N/A
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2026-9123 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Chromium (inferred from references). Its CVSS base score is 7.5 (High).
Operationally, it is not currently listed in the CISA KEV catalog.
NVD Description
Heap buffer overflow in Chromecast in Google Chrome on Android, Linux, ChromeOS prior to 148.0.7778.179 allowed a local attacker to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: Medium)
Deeper analysisAI
Automated synthesis unavailable for this CVE.
Details
- CWE(s)
Affected Products
Chromium
—
inferred from references and description; NVD did not file a CPE for this CVE
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2026-31170