CVE-2024-9126: Google Chrome

High severity, CVSS 7.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a series of curated UI gestures. (Chromium security severity: Medium)

Affected products

• Google Chrome: before 127.0.6533.88 (fixed in 127.0.6533.88)

Published 2025-11-14. Last modified 2026-10-02.