CVE-2026-7924
Uninitialized Use in Dawn in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.5
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- EPSS probability
- 0.24%
- CWE
- CWE-457
- Published
- 2026-05-06
- Last modified
- 2026-05-06
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-84391 — A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may...
- CVE-2026-78935 — Use of uninitialized variable in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a...
- CVE-2026-62986 — OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure
- CVE-2026-76919 — Use of Uninitialized Variable in Wireshark
- CVE-2026-17077 — IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM
- CVE-2026-19212 — WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable
- CVE-2026-19161 — Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...
- CVE-2026-19160 — Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who...