PT-2026-46518

CVE-2026-10989

Published

2026-05-25

Updated

2026-09-11

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An inappropriate implementation in V8 allows a remote attacker to potentially exploit heap corruption, which occurs when memory is allocated in the heap area is corrupted, via a crafted HTML page. This exploitation requires the attacker to convince a user to perform specific UI gestures.

Recommendations Update to version 149.0.7827.53 or later.

Exploitability

Fix

Impacts

Researchers

Krace

Weipeng Jiang

Vendors

Affected products

Weakness enumeration

CWE-122: Heap-based Buffer Overflow

Related identifiers