Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Dawn in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
🚨 CRITICAL: CVE-2026-9874 (CVSS 9.6) - Use-after-free in Google Chrome Dawn component (pre-148[.]0[.]7778[.]216) enables sandbox escape via crafted HTML. Update immediately. #CVE #PatchNow https://t.co/hq0c4Adsj5
Post summary
CVE‑2026‑9874 is a critical use‑after‑free vulnerability in Google Chrome that can lead to sandbox escape via crafted HTML; an update is urgently required.
CVE-2026-9874: Use-After-Free in Google Chrome Dawn WebGPU - What It Means for Your Business and How to Respond https://hubs.li/Q04m4Cg90
Post summary
The article describes a use‑after‑free flaw in Chrome’s Dawn WebGPU module, highlights potential business impact, and recommends patching and remediation measures.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |