{
  "cveId": "CVE-2026-7338",
  "url": "https://patchblox.com/security/cve/CVE-2026-7338",
  "summary": "CVE-2026-7338 is fixed in 4 products on 2 platforms, first by Google Chrome Dev (EXE) 148.0.7730.2, released March 13, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Google Chrome: Use after free",
  "description": "Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)",
  "published": "2026-04-28T23:16:21Z",
  "severity": "high",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "cwe": "CWE-416: Use after free",
  "epss": 0.00153,
  "epssPercentile": 0.04461,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2026-7338",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Google Chrome (EXE)",
      "fixedVersion": "147.0.7727.138",
      "fix": "Google Chrome (EXE) 147.0.7727.138",
      "url": "https://patchblox.com/security/fix/windows-app/google.chrome.exe-147.0.7727.138",
      "released": "2026-04-28T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Google Chrome Beta (EXE)",
      "fixedVersion": "148.0.7778.5",
      "fix": "Google Chrome Beta (EXE) 148.0.7778.5",
      "url": "https://patchblox.com/security/fix/windows-app/google.chrome.beta.exe-148.0.7778.5",
      "released": "2026-04-08T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Google Chrome Dev (EXE)",
      "fixedVersion": "148.0.7730.2",
      "fix": "Google Chrome Dev (EXE) 148.0.7730.2",
      "url": "https://patchblox.com/security/fix/windows-app/google.chrome.dev.exe-148.0.7730.2",
      "released": "2026-03-13T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "chromium",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "147.0.7727.137-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-7338",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-7338",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "chromium",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "147.0.7727.137-1~deb13u1",
      "fix": "DEBIAN-CVE-2026-7338",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-7338",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "chromium",
      "release": "Debian 14",
      "fixedVersion": "147.0.7727.137-1",
      "fix": "DEBIAN-CVE-2026-7338",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-7338",
      "released": "2026-05-15T16:01:09Z"
    },
    {
      "platform": "linux",
      "product": "chromium",
      "release": "opensuse-leap 16.0",
      "fixedVersion": "147.0.7727.137-bp160.1.1",
      "fix": "OPENSUSE-SU-2026:20660-1",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2026-20660-1",
      "released": "2026-08-31T08:40:11Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}