PT-2026-27280

CVE-2026-4679

Published

2026-03-11

Updated

2026-08-31

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.165

Description An integer overflow in the Fonts component of Google Chrome prior to version 146.0.7680.165 could allow a remote attacker to perform an out-of-bounds memory write through a specially crafted HTML page. This issue has a high severity rating according to Chromium security assessments.

Recommendations Update Google Chrome to version 146.0.7680.165 or later.

Exploitability

Fix

Impacts

Researchers

Un3Xploitable Of Deadsec

Vendors

Affected products

Weakness enumeration

CWE-190: Integer Overflow or Wraparound

CWE-472: External Control of Assumed-Immutable Web Parameter

Related identifiers