CVE-2026-10986

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An integer overflow in the Media component allows a remote attacker to execute arbitrary code within a sandbox by using a malicious file. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is too large to be stored in the allocated memory space.

Recommendations Update to version 149.0.7827.53 or later.