cve-2026-7988

CVE-2026-7988 is a WebRTC type-confusion vulnerability in Chromium that affects Google Chrome before version 148.0.7778.96 and Microsoft Edge before its corresponding security update. Documented by Google and Microsoft on May 6–7, 2026, this remotely reachable flaw can be triggered by crafted HTML, targeting the component that connects browsers to cameras, microphones, streams, and peers. Although labeled as "Medium" severity in Chromium, the vulnerability poses a significant operational risk because a browser sandbox alone is not sufficient defense. IT teams should prioritize patching Chrome and Edge to the latest versions to mitigate potential exploitation.