PT-2026-46470

CVE-2026-10941

Published

2026-04-18

Updated

2026-10-22

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description Out of bounds memory access in Skia allows a remote attacker to execute arbitrary code inside a sandbox by using a crafted HTML page. Out of bounds memory access occurs when a program reads or writes data outside the boundaries of the intended memory buffer.

Recommendations Update to version 149.0.7827.53 or later.

Exploitability

Fix

Impacts

Researchers

Krace

Weipeng Jiang

Vendors

Affected products

Weakness enumeration

CWE-787: Out-of-bounds Write

CWE-125: Out-of-bounds Read