Home / Vulnerability Intelligence / CVE-2026-7905

CVE-2026-7905 - Vulnerability Analysis

HighCVSS: 8.3

Last Updated: May 6, 2026

Google Chrome on Android - Sandbox Escape

Published: May 6, 2026Updated: May 6, 2026Remote Exploitable

Overview

Google Chrome on Android < 148.0.7778.96 contains a sandbox escape vulnerability caused by insufficient validation of untrusted input in Media, letting remote attackers with compromised renderer process escape sandbox, exploit requires compromised renderer process.

Severity & Score

Severity: High

CVSS Score: 8.3

Impact

Attackers with compromised renderer process can escape sandbox, potentially gaining higher privileges and control over the device.

Mitigation

Update to version 148.0.7778.96 or later.

References

https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html
https://issues.chromium.org/issues/495259842

Related Resources

Vulnerability Intelligence Dashboard
Credential Scanner

Details

CVE ID: CVE-2026-7905
Severity: High
CVSS Score: 8.3
Type: sandbox_escape
Status: confirmed

CWE

CWE-20

CVSS Metrics

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H