What is CVE-2026-10888?

CVE-2026-10888 is a high-severity vulnerability in Apple Macos, classified under Use After Free. CVSS score: 8.8/10. Published 2026-06-04.

How severe is CVE-2026-10888?

High severity. CVSS v3 base score is 8.8 out of 10.

Use After Free in Apple Macos

CVE-2026-10888

Use after free in Cast Streaming in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network traffic. (Chromium security severity: Critical)

Vulnerability class: Use-After-Free

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apple Macos
Google Chrome — versions 149.0.7827.53
Linux Linux_kernel
Microsoft Windows

Weakness classification (CWE)

CWE-416 — Use After Free

References

chrome-cve-admin@google.com (Release Notes, Vendor Advisory)
chrome-cve-admin@google.com (Permissions Required)

Frequently asked questions

What is CVE-2026-10888?: CVE-2026-10888 is a high-severity vulnerability in Apple Macos, classified under Use After Free. CVSS score: 8.8/10. Published 2026-06-04.
How severe is CVE-2026-10888?: High severity. CVSS v3 base score is 8.8 out of 10.