VulnSocial

CVE-2026-7896Disclosure(apple / chrome)

LOWCVSS 8.8 · HIGH

Signal is active with 6 mentions in latest observed window

Immediate actions

  • Patch apple chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

apple CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-472

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

RISING

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • linux_kernel
  • macos
  • windows

Threat summary

  • Patch or workaround signal is available
  • 15 mentions across 7 observed days
  • Momentum state: rising

What's happening

  • Patch or workaround mentioned in 5 signals
  • Technical details provided in 13 signals
  • Disclosure: 8 classified signals
  • General: 3 classified signals
  • Peaked at 6 mentions on most recent observed day (2026-06-11)
  • 15 total mentions across 7 days

Affected systems

Vendors
applegooglelinuxmicrosoft
Products
chromelinux_kernelmacoswindows

1 version affected across 4 products

Deep dive

Activity timeline15 mentions / 7d
02356Mentions · 2026-05-07: 4Mentions · 2026-05-08: 1Mentions · 2026-05-14: 1Mentions · 2026-05-15: 1Mentions · 2026-05-21: 1Mentions · 2026-06-08: 1Mentions · 2026-06-11: 6Patch / Workaround · 2026-05-07: 2Patch / Workaround · 2026-05-08: 1Patch / Workaround · 2026-05-14: 1Patch / Workaround · 2026-05-15: 1Technical Details · 2026-05-07: 4Technical Details · 2026-05-08: 1Technical Details · 2026-05-14: 1Technical Details · 2026-05-15: 1Technical Details · 2026-05-21: 1Technical Details · 2026-06-08: 1Technical Details · 2026-06-11: 405-0705-0805-1405-1505-2106-0806-11
Signal classification3 categories
Disclosure
853.3%
Patch
426.7%
General
320.0%
Referenced assets7 URLs
Classification over time
DateTotalLabels
2026-05-074
Disclosure2Patch2
2026-05-081
Patch1
2026-05-141
Disclosure1
2026-05-151
Patch1
2026-05-211
General1
2026-06-081
Disclosure1
2026-06-116
Disclosure4General2
Full discourse15 posts
  • kokumօtօ@__kokumoto
    Patch

    Chrome 148が安定版提供。重大(Critical)な脆弱性として、Blinkレンダリングエンジンにおける整数オーバーフローCVE-2026-7896が修正されている。報奨金$43,000。他、CVE-2026-7897とCVE-2026-7898（いずれも解放後メモリ使用）も重大(Critical)。 https://securityonline.info/google-chrome-148-security-update-127-fixes-cve-2026-7896/

    Post summary

    Chrome 148 is released with critical CVE fixes, including an integer overflow in Blink and use-after-free bugs, with a $43,000 bounty. No PoC, exploit code, or evidence of active exploitation is mentioned.

    100421.3K
    7.6K followersView on X
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Patch

    🚨 Chrome 148 emergency patch: 3 critical + dozens high-risk memory bugs ... update now. CVE highlights: CVE-2026-7896 (integer overflow in Blink → heap corruption/RCE potential), CVE-2026-7897 (use‑after‑free in Mobile → UAF → sandbox bypass), CVE-2026-7898 (use‑after‑free in Chromoting → remote desktop component RCE/escape); many other high/medium issues affect V8, ANGLE, GPU, Downloads, Tab Groups, Fonts, Skia, WebRTC and more. Hashtags: #Chrome148 #ZeroDay #PatchNow #InfoSec #BrowserSecurity

    Post summary

    The tweet announces an emergency update for Chrome 148, detailing three critical CVEs involving memory corruption vulnerabilities and urging users to apply the patch immediately.

    1004192
    1.8K followersView on X
  • Lyrie.ai@lyrie_ai
    General

    Sources Palo Alto Networks CVE-2026-0300 Advisory Ivanti EPMM CVE-2026-6973 CISA Alert Daemon Tools Supply Chain Compromise Report Google Chrome CVE-2026-7896 Security Release Android Security & Privacy Year in Review 2026

    Post summary

    The content lists several CVE references without providing details, proofs of concept, exploits, or mitigation information.

    1000099
    266 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    The Blink Integer Overflow Turning Chrome & Edge Into Exploit Conduits (CVE-2026-7896) On May 6, 2026, Google's Chrome Security team and Microsoft's Edge team jointly disclosed CVE-2026-7896, a critical integer overflow vulnerability in Blink, the rendering engine…

    Post summary

    Google and Microsoft jointly disclosed a critical integer‑overflow vulnerability (CVE‑2026‑7896) in Chrome and Edge's Blink rendering engine on May 6, 2026.

    1000042
    266 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    On May 6, 2026, Google's Chrome Security team and Microsoft's Edge team jointly disclosed CVE-2026-7896, a critical integer overflow vulnerability in Blink, the rendering engine powering Chrome, Edge, Opera, Brave, and dozens of other Chromium-based browsers.

    Post summary

    Google and Microsoft jointly disclosed CVE-2026-7896, a critical integer overflow vulnerability in the Blink rendering engine, on May 6, 2026.

    1000036
    266 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    TL;DR Google and Microsoft disclosed a critical integer overflow in the Blink rendering engine (CVE-2026-7896, CVSS 9.6) on May 6, 2026. The flaw allows remote attackers to trigger heap corruption via a crafted HTML page, potentially enabling code execution inside the…

    Post summary

    Google and Microsoft disclosed CVE-2026-7896, a critical integer overflow in the Blink rendering engine, which allows remote attackers to trigger heap corruption via crafted HTML and potentially execute code.

    1000040
    266 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    6, 2026, — CVE-2026-7896: The Blink Integer Overflow Turning Chrome & Edge Into Exploit Conduits. On May 6, 2026, Google's Chrome Security team and Microsoft's Edge team jointly disclosed CVE-2026-7896, a critical integer overflow vulnerability in Blink, the rendering…

    Post summary

    CVE-2026-7896 is a critical integer overflow vulnerability in Blink, jointly disclosed by Google’s Chrome Security team and Microsoft’s Edge team on May 6, 2026.

    1000041
    266 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    CVE-2026-7896 – Integer overflow in Blink rendering engine CVSS: 9.3 (High) Reporter: External researcher (March 18 discovery) Bounty: $43,000 Impact: Remote code execution via crafted HTML

    Post summary

    CVE‑2026‑7896 is an integer overflow in the Blink rendering engine that permits remote code execution via crafted HTML. It is a high‑severity disclosure with no PoC, exploit code, or active exploitation mentioned.

    1000046
    258 followersView on X
  • iototsecnews@iototsecnews
    Disclosure

    Google Chrome 148 がリリース：3件の Critical を含む 127 件の脆弱性を修正 https://iototsecnews.jp/2026/05/07/google-chrome-148-released-with-fix-for-127-security-vulnerabilities-update-now/ 今回のアップデートでは、メモリの管理不備が引き起こす、多くの脆弱性が修正されています。脆弱性 CVE-2026-7897／ CVE-2026-7898／CVE-2026-7901 などに見られる解放後メモリ使用の問題は、一度解放されたはずのメモリ領域に、プログラムが再アクセスすることで発生します。また、 CVE-2026-7896 のような整数オーバーフローや、 CVE-2026-7899 などの境界外読み取り／書き込みといった問題は、データのサイズ確認やアクセス範囲の制限が不十分なことで発生します。 V8 エンジンや ANGLE といった複雑な仕組みの中で、オブジェクトの寿命やデータの境界を正確に制御することの難しさが、これらの脆弱性につながっています。ご利用のチームは、ご注意ください。 #Chrome #Google #Vulnerability

    Post summary

    This post announces the Chrome 148 release, lists several specific CVEs, and outlines the technical nature (use‑after‑free, integer overflow, OOB) of the vulnerabilities that the update fixes.

    01000146
    491 followersView on X
  • Lyrie.ai@lyrie_ai
    General

    https://lyrie.ai/research/research/2026-05-09-cve-2026-7896-blink-rce #lyrie #cybersecurity #CVE #threatintel #zerodayattack

    Post summary

    The excerpt only references a research URL about CVE-2026-7896 with no additional details or actionable intelligence disclosed.

    0000030
    266 followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-7896: Integer overflow in Blink - What It Means for Your Business and How to Respond https://hubs.li/Q04hvHXk0

    Post summary

    The headline refers to an informational article about CVE‑2026‑7896, noting it as an integer overflow in Blink, but offers no evidence of PoC, exploit code, active exploitation, patches, or debunking.

    0000034
    31 followersView on X
  • Mr.Rabbit@01ra66it
    Patch

    【Chrome Releases: Stable Channel Update for Desktop】 Googleは、デスクトップ向けChrome 148のStable Channel Updateを公開し、127件のセキュリティ修正を含むと説明しています。関連情報では、Blinkの整数オーバーフロー CVE-2026-7896、MobileやChromotingのUse After Freeなど、Criticalに分類される脆弱性も含まれています。 ブラウザは、業務SaaS、メール、ID管理、チャット、管理コンソールへの入口です。Chromeの脆弱性は、細工されたWebページやコンテンツを通じて端末侵害や認証情報窃取につながる可能性があるため、利用者任せの更新ではなく端末管理で確認する必要があります。 防御側は、Chromeのバージョン、更新失敗端末、VDIや共有端末、業務上固定バージョンにしている端末を抽出すべきです。ブラウザ拡張機能の棚卸しと、EDRでのブラウザ子プロセス異常もあわせて確認する価値があります。 #GoogleChrome #Chrome148 #CVE20267896 #ブラウザセキュリティ #EDR #脆弱性対応 https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html

    Post summary

    Google released a Chrome 148 Stable Channel update containing 127 security fixes, including critical integer-overflow and use-after-free flaws, and urges users to apply the patch promptly.

    00000267
    3.7K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-7896 Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium se… https://www.cve.org/CVERecord?id=CVE-2026-7896 ----- Traducción: CVE-2026-7896 des… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-7896, detailing an integer overflow in Chrome’s Blink that could lead to heap corruption via crafted HTML pages, with no PoC, active exploitation, patch, or debunking claims cited.

    0000067
    75 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7896 Integer overflow in Blink in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium se… https://www.cve.org/CVERecord?id=CVE-2026-7896

    Post summary

    CVE-2026-7896 is an integer overflow vulnerability in Chrome's Blink engine that can cause heap corruption via crafted web pages; no active exploitation or PoC has been reported yet.

    00000156
    57.4K followersView on X
  • Geek@geek_of_life
    Patch

    Google corrige 127 vulnérabilités, mais 3 critiques. CVE-2026-7898 – Use-after-free in Chromoting (Chrome Remote Desktop) CVE-2026-7897 – Use-after-free in Mobile CVE-2026-7896 – Integer overflow in Blink (moteur de rendu) Le principal serait des bugs mineurs. #cyber #bug

    Post summary

    Google announces patches for 127 vulnerabilities, highlighting three critical CVEs—two use‑after‑free bugs in Chrome Remote Desktop and Mobile, and an integer overflow in Blink—updating affected components.

    00000107
    113 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more

Back to dashboardapple CVEsgoogle CVEslinux CVEschrome vulnerabilities