cve-2026-7921

CVE-2026-7921 is a high-severity use-after-free vulnerability in Chrome's Passwords component, disclosed on May 6, 2026, affecting Google Chrome before version 148.0.7778.96 on Windows, macOS, and Linux desktops. The flaw allows arbitrary code execution via a crafted HTML page due to a memory-safety mistake. Because Microsoft Edge is Chromium-based, it inherits the same upstream browser security surface, making this vulnerability relevant to Edge users as well. Discussions on WindowsForum.com highlight that the password manager, intended as a trust vault, remains built on browser code susceptible to such flaws, emphasizing the importance of timely patching for both Chrome and Edge users.