Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
| Date | Total | Labels |
|---|
| 2026-05-07 | 3 | Disclosure3 |
| 2026-05-14 | 1 | Patch1 |
@ret2happy [$16000][497724490] High CVE-2026-7901: Use after free in ANGLE. Reported by Syn4pse (@ret2happy) on 2026-03-30 game winner happy
Post summary
The tweet announces a high-severity use-after-free vulnerability (CVE-2026-7901) in ANGLE, providing the technical nature of the flaw but no PoC, exploit code, or patch information.
Google Chrome 148 がリリース：3件の Critical を含む 127 件の脆弱性を修正 https://iototsecnews.jp/2026/05/07/google-chrome-148-released-with-fix-for-127-security-vulnerabilities-update-now/ 今回のアップデートでは、メモリの管理不備が引き起こす、多くの脆弱性が修正されています。脆弱性 CVE-2026-7897／ CVE-2026-7898／CVE-2026-7901 などに見られる解放後メモリ使用の問題は、一度解放されたはずのメモリ領域に、プログラムが再アクセスすることで発生します。また、 CVE-2026-7896 のような整数オーバーフローや、 CVE-2026-7899 などの境界外読み取り／書き込みといった問題は、データのサイズ確認やアクセス範囲の制限が不十分なことで発生します。 V8 エンジンや ANGLE といった複雑な仕組みの中で、オブジェクトの寿命やデータの境界を正確に制御することの難しさが、これらの脆弱性につながっています。ご利用のチームは、ご注意ください。 #Chrome #Google #Vulnerability
Post summary
Google Chrome 148 was released with fixes for 127 vulnerabilities, including several critical memory‑management issues; the post focuses on the patch release and technical details of the bugs.
🚨*CVE* CVE-2026-7901 Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… https://www.cve.org/CVERecord?id=CVE-2026-7901 ----- Traducción: CVE-2026-7901 Uso… http://infoflow.cloud`
Post summary
CVE-2026-7901 documents a use-after-free flaw in ANGLE on macOS Chrome prior to 148.0.7778.96 that can lead to remote code execution through a crafted HTML page, with no mention of PoC, active exploitation, or patch.
CVE-2026-7901 Use after free in ANGLE in Google Chrome on Mac prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Ch… https://www.cve.org/CVERecord?id=CVE-2026-7901
Post summary
CVE-2026-7901 is a use‑after‑free vulnerability in ANGLE impacting Chrome on macOS before version 148.0.7778.96, enabling remote attackers to execute arbitrary code inside a sandbox via crafted HTML.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - |