PT-2026-46475 · Google · Google Chrome
CVE-2026-10946
·
Published
2026-04-20
·
Updated
2026-08-31
CVSS v2.0
7.6
High
| Vector | AV:N/AC:H/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 149.0.7827.53
Description
A heap buffer overflow occurs in the Media component. This issue allows a remote attacker to execute arbitrary code within a sandbox if a user is convinced to perform specific UI gestures while interacting with a crafted HTML page. A heap buffer overflow is a memory corruption issue that happens when a program writes more data to a heap-allocated buffer than it can hold.
Recommendations
Update to version 149.0.7827.53 or later.
Fix
DoS
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Google Chrome