CVE-2026-10949

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description A heap buffer overflow exists in the Video component. This issue allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. A heap buffer overflow occurs when a program writes more data to a heap-allocated memory block than it can hold, potentially corrupting adjacent memory.

Recommendations Update to version 149.0.7827.53 or later.