Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Chrome for Mac before 149 allows attackers to run code
published 5 months ago
Summary
A flaw in the password manager of Chrome on macOS (versions before 149.0.7827.53) could let a remote attacker run any program on a user's computer if the user clicks or drags in a certain way on a malicious webpage. This could let the attacker steal data or take control of the system. Updating Chrome to the latest version fixes the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | chromium | All versions |
Original advisory text
ECHO-190b-3bc7-3fea
Timeline
Published6 Jun 2026
Updated6 Jun 2026
First seen6 Jun 2026
Sources
ECHO-190b-3bc7-3fea · OSV
Track software like this
Free during beta