cve-2026-7980

CVE-2026-7980 is a Chromium WebAudio use-after-free vulnerability patched in Chrome before version 148.0.7778.96 and in Microsoft Edge builds that incorporate the fix. Although Chromium rates it as medium severity, CISA's ADP process assigns a CVSS 3.1 score of 8.8, highlighting a discrepancy in severity labeling. For Windows administrators, the key action is ensuring Chromium-family browsers are updated to version 148.0.7778 or later and verifying that policy-controlled endpoints have applied the update. This tag covers discussions about the vulnerability, its impact on Windows systems, and practical remediation steps for enterprise environments.