CVE-2026-9902: Use after free in Accessibility
Published Mar 31, 2026
·Updated
Chromium: CVE-2026-9902 Use after free in Accessibility
Other sources
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Use after free in Accessibility in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
— NVD
Credit
Google
Affected Software
4 affected componentsFixes available
Google Chrome<148.0.7778.216
Microsoft Edge (Chromium-based)
Microsoft Edge<148.0.3967.96
Google Chrome<148.0.7778.216
Event History
May 28, 2026
CVE Published
via MITRE·10:25 PM
Data Sourced
via MITRE·10:25 PM
DescriptionWeakness
Data Sourced
via NVD·11:16 PM
DescriptionSeverityWeaknessAffected Software
May 29, 2026
Data Sourced
via Microsoft·11:19 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·11:19 PM
DescriptionAffected Software
Jun 3, 2026
Data Sourced
12:00 AM
SeverityWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.