What is CVE-2026-7338?

CVE-2026-7338 is a high-severity vulnerability in Apple Macos, classified under Use After Free. CVSS score: 7.5/10. Published 2026-04-28.

How severe is CVE-2026-7338?

High severity. CVSS v3 base score is 7.5 out of 10.

Use After Free in Apple Macos

CVE-2026-7338

Use after free in Cast in Google Chrome prior to 147.0.7727.138 allowed an attacker on the local network segment to potentially exploit heap corruption via malicious network traffic. (Chromium security severity: High)

Vulnerability class: Use-After-Free

EPSS: 0.000 (1.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apple Macos
Google Chrome — versions 147.0.7727.138
Linux Linux_kernel
Microsoft Windows

Weakness classification (CWE)

CWE-416 — Use After Free

References

chrome-cve-admin@google.com (Vendor Advisory)
chrome-cve-admin@google.com (Permissions Required)

Frequently asked questions

What is CVE-2026-7338?: CVE-2026-7338 is a high-severity vulnerability in Apple Macos, classified under Use After Free. CVSS score: 7.5/10. Published 2026-04-28.
How severe is CVE-2026-7338?: High severity. CVSS v3 base score is 7.5 out of 10.