PT-2026-46457 · Google · Google Chrome

CVE-2026-10928

Published

2026-04-06

Updated

2026-08-31

CVSS v2.0

High

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description Script injection in Headless mode allows a remote attacker to execute arbitrary code through a crafted HTML page.

Recommendations Update to version 149.0.7827.53 or later.

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

BDU:2026-12918

CVE-2026-10928

ECHO-DEFF-ABB7-6292

OPENSUSE-SU-2026:10958-1

OPENSUSE-SU-2026:21135-1

Google Chrome