CVE-2026-9873Patch(apple / chrome)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apple chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Critical)

1.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • linux_kernel
  • macos
  • windows

Threat summary

  • Patch or workaround signal is available
  • 7 mentions across 6 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 6 signals
  • Technical details provided in 5 signals
  • Disclosure: 1 classified signal
  • Peaked 4d ago at 2 mentions (2026-05-31); latest day: 1
  • 7 total mentions across 6 days

Affected systems

Products
chromelinux_kernelmacoswindows

1 version affected across 4 products

Deep dive

Activity timeline7 mentions / 6d
01122Mentions · 2026-05-29: 1Mentions · 2026-05-31: 2Mentions · 2026-06-02: 1Mentions · 2026-06-04: 1Mentions · 2026-06-18: 1Mentions · 2026-07-21: 1Patch / Workaround · 2026-05-29: 1Patch / Workaround · 2026-05-31: 2Patch / Workaround · 2026-06-02: 1Patch / Workaround · 2026-06-04: 1Patch / Workaround · 2026-07-21: 1Technical Details · 2026-05-29: 1Technical Details · 2026-05-31: 1Technical Details · 2026-06-02: 1Technical Details · 2026-06-18: 1Technical Details · 2026-07-21: 105-2905-3106-0206-0406-1807-21
Signal classification2 categories
Patch
685.7%
Disclosure
114.3%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-05-291
Patch1
2026-05-312
Patch2
2026-06-021
Patch1
2026-06-041
Patch1
2026-06-181
Disclosure1
2026-07-211
Patch1
Full discourse7 posts
  • セキュリティ対策Lab@securityLab_jp
    Patch

    Google、Chromeをアップデート、151件の脆弱性を修正-CVE-2026-9872(GPU),CVE-2026-9873(Network) https://rocket-boys.co.jp/security-measures-lab/chrome-vulnerabilities-patched-cve-2026-9872-9873/ #セキュリティ対策Lab #security #securitynews

    Post summary

    The post announces that Google Chrome has been updated to address 151 vulnerabilities, including CVE-2026-9872 (GPU) and CVE-2026-9873 (Network), indicating the availability of patches.

    00011168
    408 followersView on X
  • Cybersecurity News Everyday@TweetThreatNews
    Patch

    Chrome 148 patches 151 vulnerabilities, including 22 critical flaws that could enable RCE or sandbox escape. Top issues include CVE-2026-9872 in GPU and CVE-2026-9873 in Network. #Chrome148 #CVE2026 #BrowserSecurity https://ift.tt/i6UYXfo

    Post summary

    Chrome 148 announces critical patches for multiple vulnerabilities, including CVE-2026‑9872 and CVE-2026‑9873, with fixes now released.

    00010137
    4.3K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-9873 (CVSS 8.8) - Use-after-free in Google Chrome <148.0.7778.216 allows remote code execution via crafted HTML. Update immediately. #CVE #PatchNow #CyberSecurity https://t.co/X9vNZ8UirP

    Post summary

    CVE‑2026‑9873 is a high‑severity use‑after‑free flaw in Chrome that allows remote code execution; users are urged to update immediately.

    0000036
    88 followersView on X
  • IntegSec@integ_sec
    Disclosure

    CVE-2026-9873: Use-After-Free in Google Chrome Network Component - What It Means for Your Business and How to Respond https://hubs.li/Q04lQR-f0

    Post summary

    The content is a disclosure article describing a Use-After-Free vulnerability in Google Chrome's network component, focusing on its business implications and response guidance.

    0000035
    31 followersView on X
  • NCIIPC India@NCIIPC
    Patch

    #Google #Chrome released LTS-144 version 144.0.7559.254 (Platform Version: 16503.86.0) for most ChromeOS devices. This addresses Critical Vulnerabilities #CVE-2026-9887 #CVE-2026-9873 #CVE-2026-9891. Apply Updates! https://chromereleases.googleblog.com/2026/06/long-term-support-channel-update-for.html

    Post summary

    Google ChromeOS LTS-144 update releases patches for three critical CVEs, but provides no PoC, exploit, or technical details, and does not confirm active exploitation.

    00000165
    8.4K followersView on X
  • Hi@hieyz6838
    Patch

    GPU sandbox escapes hitting $43k in 2026?? the browser attack surface is wild rn 👀 CVE-2026-9872 out-of-bounds write in GPU, CVE-2026-9873 use-after-free in Network. update immediately if you haven't yet #bugbounty #InfoSec

    Post summary

    The post warns about two newly disclosed GPU sandbox vulnerabilities, urging users to apply available patches immediately but does not provide any exploit details.

    0000070
    13 followersView on X
  • Marcus Lenngren@lenngrenm
    Patch

    ⚠️ CRITICAL: Chrome 148 Update Patches 151 Vulnerabilities Google released Chrome 148 patching 151 vulnerabilities, including 22 critical-severity flaws that enable remote code execution and sandbox escape. CVE-2026-9872 and CVE-2026-9873 https://threatnoir.com/focus #cyberse

    Post summary

    The tweet announces Chrome 148, which patches 151 vulnerabilities, including two critical flaws (CVE‑2026‑9872 and CVE‑2026‑9873) that enable remote code execution and sandbox escape.

    0000074
    322 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more