Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)
History

Wed, 29 Apr 2026 01:30:00 +0000

Type Values Removed Values Added
Title Local Network Use‑After‑Free in Chrome Cast Enables Arbitrary Code Execution

Wed, 29 Apr 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 28 Apr 2026 23:00:00 +0000

Type Values Removed Values Added
Description Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to execute arbitrary code inside a sandbox via malicious network traffic. (Chromium security severity: High)
Weaknesses CWE-416
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published: 2026-04-28T22:36:00.774Z

Updated: 2026-04-28T22:36:00.774Z

Reserved: 2026-04-28T20:02:42.721Z

Link: CVE-2026-7349

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-04-28T23:16:22.490

Modified: 2026-04-28T23:16:22.490

Link: CVE-2026-7349

cve-icon Redhat

No data.