PT-2026-46495

CVE-2026-10966

Published

2026-05-10

Updated

2026-09-11

Description by

CVSS 2.0

Critical

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An inappropriate implementation in Codecs allows a remote attacker to potentially perform a sandbox escape by using a crafted video file. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the underlying system.

Recommendations Update to version 149.0.7827.53 or later.

Exploitability

Fix

Impacts

Researchers

Krace

Weipeng Jiang

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers