CVE-2026-9117
â ī¸ highSummary
Type Confusion in GFX in Google Chrome on Linux, ChromeOS prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)
CVSS Score
7.5
High
EPSS Score
0.3
Exploit Probability
Published Date
2026-05-20
First Seen: 2026-05-21
đ Relative Risk Intelligence
This CVE is Moderate Risk - more severe than 67.9% of all 353,401 vulnerabilities in our database.
#113,306
Above average severity
Severity Percentile
đ¯ CISA SSVC Assessment Updated: May 21, 2026
đ Exploitation Status
None
No known exploits
âī¸ Automatable
NO
Requires human interaction
đĨ Technical Impact
Total
Complete system compromise possible
SSVC data provided by
CISA
Last Modified
2026-07-23
Source
NVD đ
CVSS Vector 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)