Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Google Chrome before version 148 can let attackers run code via a malicious web page
published 5 months ago
Summary
If a malicious web page tricks Chrome's rendering component, an attacker could take control of the browser and run their own code on the computer. This risk applies to Chrome versions earlier than 148.0.7778.216. Update Chrome to the latest version as soon as possible to close the gap.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | chromium | All versions |
Original advisory text
ECHO-2eb6-424b-33c0
References
Timeline
Published29 May 2026
Updated30 May 2026
First seen30 May 2026
Sources
ECHO-2eb6-424b-33c0 · OSV
Track software like this
Free during beta