What is the CVSS score of CVE-2026-7334?

CVE-2026-7334 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Google are affected by CVE-2026-7334?

A heap corruption vulnerability in Google Chrome for macOS (versions before 147.0.7727.138) enables remote code execution when employees visit a malicious website, exposing the organization's macOS…. A patch is available.

How to fix or mitigate CVE-2026-7334?

Within 24 hours, issue an urgent security alert to all macOS users directing immediate manual updates if auto-update is disabled, and inventory Chrome versions across the fleet. Within 7 days, deploy Chrome version 147.0.7727.138 or later to all macOS endpoints via your MDM platform, prioritizing systems with access to sensitive applications or customer data, and confirm auto-update is enabled organization-wide. Within 30 days, audit Chrome version compliance to verify 100% adoption of patched versions and close the vulnerability ticket in your tracking system.

Google CVE-2026-7334

HIGH

Use After Free (CWE-416)

2026-04-28 Chrome

Denial Of Service Google Use After Free Memory Corruption

8.8

CVSS 3.1 · Vendor: Chrome

Severity by source

Vendor (Chrome) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Red Hat

8.8 HIGH

qualitative

Primary rating from Vendor (Chrome).

CVSS VectorVendor: Chrome

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 03:56 vuln.today

CVSS changed

Apr 29, 2026 - 19:22 NVD

8.8 (HIGH)

Patch released

Apr 29, 2026 - 00:30 nvd

Patch available

CVE Published

Apr 28, 2026 - 22:35 nvd

HIGH 8.8

DescriptionCVE.org

Use after free in Views in Google Chrome on Mac prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Heap corruption in the Views UI component of Google Chrome on macOS (versions prior to 147.0.7727.138) lets a remote attacker trigger a use-after-free by luring a victim to a crafted HTML page, potentially leading to arbitrary code execution. Rated High by Chromium with a CVSS of 8.8; no public exploit identified at time of analysis, EPSS is very low (0.01%), and CISA SSVC lists exploitation as none.