cve 2026-7932

CVE-2026-7932 is a medium-severity Chromium vulnerability affecting Chrome 148 and Microsoft Edge's Chromium-based browser. Documented by Google and Microsoft in early May 2026, the flaw allows a local attacker, with user interaction, to bypass navigation restrictions via a crafted HTML page. The bug was fixed in Chrome before version 148.0.7778.96 and in corresponding Edge builds. While less severe than critical memory-corruption issues in the same update wave, CVE-2026-7932 highlights that browser policy enforcement is a critical part of endpoint security for Windows environments. WindowsForum discussions emphasize the importance of applying browser updates promptly to mitigate such policy bypass risks.