CVE-2026-9975

Description

Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Overview

State

—

Assigner (CNA)

—

CVSS severity

MEDIUM

CVSS score

5.0 / 10

CVSS vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Effective score

5.0 / 10 MEDIUM source: CNA overview

CWE(s)

—

Reserved

—

Published

2026-06-01 00:00 UTC

Last updated

2026-06-19 14:40 UTC

Source

https://www.rapid7.com/db/vulnerabilities/debian-cve-2026-9975/

Linked Threat

CVE-2026-9975 — CVE-2026-9975

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2026-05-28 23:16:55 UTC

NVD last modified

2026-06-17 11:05:56 UTC

NVD CVSS v3.1

8.3 / 10 HIGH source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Exploitability subscore

1.6 / 10

Impact subscore

6.0 / 10

EPSS score

0.0021 (probability of exploitation in next 30 days)

EPSS percentile

11.62% vs all CVEs — higher = more likely to be exploited, as of 2026-06-30

NVD-assigned CWE(s): CWE-125, CWE-787 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2026-33117

Assigner

Chrome

Published

May 28, 2026, 10:25:42 PM

Updated

May 30, 2026, 3:56:55 AM

EUVD base score (CVSS 3.1)

8.3 / 10
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

EUVD-reported EPSS

0.2100

Vendors

Google

Products

Chrome (148.0.7778.216 <148.0.7778.216)

Aliases

GHSA-rpm7-phh8-26f7

ENISA description: Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Microsoft Security Response Center MSRC

Microsoft's vendor-authoritative record from the Security Update Guide — its own CVSS score, impact, severity rating, exploit assessment, and KB-article fixes. Refreshed 2026-08-15 03:02 UTC (source: CVRF).

Release

2026-May

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

Web references (11)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• MSRC update guide: CVE-2026-9975 msrc
• None Available msrc
• https://issues.chromium.org/issues/511719039 tenable:issues.chromium.org
• https://nvd.nist.gov/vuln/detail/CVE-2026-9975 tenable:nvd.nist.gov
• https://www.first.org/epss/ tenable:www.first.org
• https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html rapid7:chromereleases.googleblog.com
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-33117 rapid7:euvd.enisa.europa.eu
• http://cwe.mitre.org/data/definitions/787.html rapid7:cwe.mitre.org
• https://attackerkb.com/topics/CVE-2026-9975 rapid7:attackerkb.com
• http://cwe.mitre.org/data/definitions/125.html rapid7:cwe.mitre.org
• https://www.cve.org/CVERecord?id=CVE-2026-9975 rapid7:www.cve.org

Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.

• Rapid7 — Solution
  rapid7

  google-chrome-upgrade-latest

  2026-06-04 08:59 UTC
• Rapid7 — Solution
  rapid7

  debian-upgrade-chromium

  2026-06-04 08:56 UTC
• PoC Exploit Released for HTTP/2 Bomb Remote DoS Vulnerability in Apache ...
  web:cybersecuritynews.com

  A proof-of-concept (PoC) exploit has been publicly released for a critical Denial of Service vulnerability in Apache HTTP Server, tracked as CVE - 2026 -49975, dubbed the "HTTP/2 Bomb." The flaw allows remote attackers to exhaust server memory and disrupt services without authentication, posing a significant risk to organizations running unpatched Apache deployments. The vulnerability lies in ...

  2026-06-19 02:30 UTC
• CVE-2026-49975 HTTP/2 Bomb Hits nginx, Apache, Envoy, and Cloudflare
  web:dailysecurityreview.com

  CVE - 2026 -49975 HTTP/2 Bomb exploit achieves 5,700:1 amplification against Envoy, crashing 32 GB of server memory with a single residential connection.

  2026-06-19 02:30 UTC
• Security Update Guide - Loading - Microsoft
  web:portal.msrc.microsoft.com

  The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  2026-06-19 02:30 UTC
• Description of the security update for Office Online Server: June 9 ...
  web:support.microsoft.com

  Notes: This is build 16..10417.20137 of the security update package. To apply this security update, you must have the release version of Microsoft Office Online Server installed on the computer.

  2026-06-19 02:30 UTC
• A guide to vulnerability remediation vs mitigation | @Bugcrowd
  web:www.bugcrowd.com

  Vulnerability mitigation is typically considered a temporary or interim solution. While mitigation measures can reduce the immediate risk associated with vulnerabilities, they may not provide a permanent fix . Organizations should aim to prioritize and plan for complete vulnerability remediation whenever feasible and allocate resources accordingly.

  2026-06-19 02:30 UTC
• Microsoft Confirms It Is Urgently Working On Patch For ... - LinkedIn
  web:www.linkedin.com

  Microsoft has confirmed that it is developing a security update to address a newly disclosed zero-day vulnerability in Microsoft Defender, following the public release of exploit code that ...

  2026-06-19 02:30 UTC
• Microsoft working on a fix for RoguePlanet, a flaw that grants full PC ...
  web:www.malwarebytes.com

  Microsoft says it's working on a fix for an unpatched Defender vulnerability that can give attackers the highest level of access on Windows.

  2026-06-19 02:30 UTC
• Patch Tuesday - June 2026 - Rapid7
  web:www.rapid7.com

  Microsoft is publishing 200 vulnerabilities on June 2026 Patch Tuesday, including an HTTP/2 denial of service vulnerability and an elevation of privilege vulnerability in PowerToys.

  2026-06-19 02:30 UTC
• Vulnerability Remediation vs. Mitigation: What are the Differences ...
  web:www.secure.com

  Remediation fully removes a vulnerability by fixing its root cause — through a patch , code fix , or system replacement. Mitigation reduces the risk of exploitation without removing the flaw itself, using controls like network segmentation or access restrictions.

  2026-06-19 02:30 UTC
• Patch Tuesday June 2026: Security Updates & CVE Analysis
  web:zecurit.com

  Get the complete breakdown of Microsoft's June 2026 Patch Tuesday. We analyze the latest security updates and all critical CVEs .

  2026-06-19 02:30 UTC

Only Available for Registered Users. Sign in to view.