High · 7.5 CVE-2024-9126 EUVD-2024-55073GHSA-q7v7-xg85-x35m

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in spec…

Published Nov 14, 2025 · Updated Feb 26, 2026 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Wolfi

Description

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. (Chromium security severity: Medium)

Affected products

Vendor	Product	Affected	Fixed
Google	Chrome	127.0.6533.88 – < 127.0.6533.88	127.0.6533.88

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

Release	Package	Fixed in	Advisory
Wolfi rolling	chromium	127.0.6533.88-r0	—