What is the CVSS score of EUVD-2026-40478?

EUVD-2026-40478 has a CVSS 3.1 base score of 9.6 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Google Chrome are affected by EUVD-2026-40478?

Google Chrome for macOS (versions prior to 150.0.7871.47) contains a critical sandbox escape vulnerability that allows remote attackers to execute code with system-level privileges by directing users…. A patch is available.

How to fix or mitigate EUVD-2026-40478?

24 hours: Identify all macOS systems running Chrome versions prior to 150.0.7871.47; assess user base and deployment scope. 7 days: Deploy Chrome 150.0.7871.47 or later via managed deployment channels (MDM/endpoint management); prioritize business-critical systems and users in high-risk roles. 30 days: Audit compliance across all macOS devices; enforce auto-update policies to prevent regression.

Google Chrome EUVD-2026-40478

| CVE-2026-13792 CRITICAL

Use After Free (CWE-416)

2026-06-30 chrome-cve-admin@google.com

GHSA-cx7m-wf2v-m4f4

Memory Corruption Denial Of Service Use After Free Google Suse

9.6

CVSS 3.1 · Vendor: google

Severity by source

Vendor (google) PRIMARY

9.6 CRITICAL

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

vuln.today AI

9.6 CRITICAL

Remote crafted page needs user interaction (UI:R) but no auth (PR:N); sandbox escape crosses the security boundary (S:C) with total impact, matching a High-severity Chrome UAF.

3.1 AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

SUSE

CRITICAL

qualitative

Primary rating from Vendor (google).

CVSS VectorVendor: google

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 01, 2026 - 21:31 vuln.today

CVSS changed

Jul 01, 2026 - 19:22 NVD

9.6 (None) 9.6 (CRITICAL)

CVE Published

Jun 30, 2026 - 23:16 cve.org

CRITICAL 9.6

CVE Published

Jun 30, 2026 - 23:16 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Use after free in Touchbar in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Sandbox escape in Google Chrome for macOS versions prior to 150.0.7871.47 stems from a use-after-free in the Touchbar component, letting a remote attacker who lures a victim to a crafted HTML page potentially break out of the renderer sandbox. Reported through Google's internal Chrome security process and rated High by Chromium, it carries a CVSS 9.6 due to scope change and full CIA impact, though there is no public exploit identified at time of analysis and EPSS exploitation probability is low at 0.21%. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Lure macOS Chrome user to page

Delivery

Serve crafted HTML content

Exploit

Trigger Touchbar use-after-free

Execution

Reclaim freed memory with controlled data

Persist

Achieve renderer code execution

Impact

Escape sandbox to host process

Access

Lure macOS Chrome user to page

Delivery

Serve crafted HTML content

Exploit

Trigger Touchbar use-after-free

Execution

Reclaim freed memory with controlled data

Persist

Achieve renderer code execution

Impact

Escape sandbox to host process

Vulnerability AssessmentAI

Exploitation	Exploitation requires the victim to open attacker-controlled web content in Chrome on macOS (UI:R - user interaction, i.e. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The signals here are deliberately mixed and worth reconciling. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker hosts a crafted HTML page and lures a target using a Touch Bar-equipped MacBook running an unpatched Chrome to visit it via a phishing link or malicious ad. The page triggers the use-after-free in the Touchbar component, corrupting freed memory to gain control of execution and potentially escape the renderer sandbox to run code with the browser process's privileges. …
Remediation	Vendor-released patch: update Google Chrome for macOS to 150.0.7871.47 or later via the Stable channel; this is the primary and complete fix, published in Google's Stable Channel Update for Desktop (https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html). … Detailed patch versions, workarounds, and compensating controls in full report.