7.5
/ 10
HIGH
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)
Basic Information
ID
CVE-2026-7349
Source
Chrome
Published
Apr 28, 2026 at 22:36
Modified
Apr 29, 2026 at 13:18
Affected Product
Vendor
Google
Product
Chrome
Version
147.0.7727.138
Affected Versions
Google Chrome 147.0.7727.138