cve 2026 7920

CVE-2026-7920 is a high-severity use-after-free vulnerability in the Skia graphics library affecting Google Chrome before version 148.0.7778.96. Published on May 6, 2026, the flaw could allow an attacker who first compromises the renderer process to escape the browser sandbox. Microsoft tracks this vulnerability for Edge because Edge inherits Chromium's codebase. The vulnerability is notable because modern browser attacks often chain multiple bugs, making sandbox escape flaws like CVE-2026-7920 a critical component in exploit chains. Users are advised to update Chrome or Edge to the latest patched versions to mitigate the risk.