CVE-2026-9990 - AskarLabs CVE Database

CVE-2026-9990

Vendor Google

Product Chrome

Weakness CWE-416

Published May 28, 2026

Last update May 30, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Use after free in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Key dates

02Disclosure timeline

May 28, 2026 CVE published

May 30, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-9990 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/416.html

Related vulnerabilities

04Related CVE

CVE-2026-21253 Mailslot File System Elevation of Privilege Vulnerability CVE-2023-42093 Foxit PDF Reader Annotation Use-After-Free Information Disclosure Vulnerability CVE-2026-13823 CVE-2023-26420 ZDI-CAN-20227: Adobe Acrobat Reader DC AcroForm addField Use-After-Free Remote Code Execution Vulnerability CVE-2024-26231 Windows DNS Server Remote Code Execution Vulnerability