CVE-2026-7911

high
Published 2026-05-06 ยท Modified 2026-05-06
CVSS v3
8.3
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS v4 NEW
โ€”
not yet in upstream
VIR risk
8.3

Description

<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026%C2%A0">Google Chrome Releases</a> for more information.</p>

Predictions

Exploit likelihood
89%
Patch ETA
โ€”

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Microsoft Security Response Center ยท View original โ†— ยท proprietary-no-redistribution
Full prose not cached โ€” VIR stores only structured fields (affected/fixed versions, references) for this source. Click "View original" above for the vendor's full advisory.

Affected

VendorProductVersion
microsoftWindows Server 2012
microsoftWindows Server 2012 (Server Core installation)
microsoftWindows Server 2012 R2
microsoftWindows Server 2012 R2 (Server Core installation)
microsoftMicrosoft Excel 2016 (32-bit edition)
microsoftMicrosoft Excel 2016 (64-bit edition)
microsoftMicrosoft Word 2016 (32-bit edition)
microsoftMicrosoft Word 2016 (64-bit edition)
microsoftMicrosoft Office 2016 (32-bit edition)
microsoftMicrosoft Office 2016 (64-bit edition)
microsoftWindows Server 2016
microsoftOffice Online Server
microsoftWindows 10 Version 1607 for 32-bit Systems
microsoftWindows 10 Version 1607 for x64-based Systems
microsoftWindows Server 2016 (Server Core installation)
microsoftMicrosoft SharePoint Enterprise Server 2016
microsoftMicrosoft SQL Server 2017 for x64-based Systems (GDR)
microsoftWindows 10 Version 1809 for 32-bit Systems
microsoftWindows 10 Version 1809 for x64-based Systems
microsoftWindows Server 2019
microsoftWindows Server 2019 (Server Core installation)
microsoftMicrosoft Office 2019 for 32-bit editions
microsoftMicrosoft Office 2019 for 64-bit editions
microsoftMicrosoft SharePoint Server 2019
microsoftVisual Studio Code
microsoftWindows Admin Center
microsoftMicrosoft .NET Framework 4.8 on Windows Server 2012
microsoftMicrosoft .NET Framework 4.8 on Windows Server 2012 R2
microsoftMicrosoft .NET Framework 4.8 on Windows Server 2016
microsoftMicrosoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems

OS impact

OSVersionStatusFixed in
debian debianbookwormfixed148.0.7778.96-1~deb12u1
debian debianbullseyeaffected
debian debianforkyfixed148.0.7778.96-1
debian debiansidfixed148.0.7778.96-1
debian debiantrixiefixed148.0.7778.96-1~deb13u1
windows windowsaffected

Application impact

VendorProductVersionsFixed
gcp googlechrome{"endExcluding":"148.0.7778.96"}148.0.7778.96

References

CWEs

CWE-416

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.