Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Aura in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH: CVE-2026-9934 (CVSS 7.5) - Use-after-free in Google Chrome Aura (pre-148.0.7778.216) allows remote code execution via crafted HTML. Update Chrome immediately. #CVE #PatchNow https://t.co/vnDhN4oVzS
Post summary
A high‑severity CVE-2026-9934 vulnerable to remote code execution via a use‑after‑free bug in Google Chrome Aura has been disclosed, and users are urged to update immediately.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |