PT-2026-46834

CVE-2026-11307

Published

2026-04-20

Updated

2026-09-15

Description by

CVSS 2.0

High

MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description A use after free issue in PDFium allows a remote attacker to execute arbitrary code within a sandbox by using a specially crafted PDF file. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Recommendations Update to version 149.0.7827.53 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-416: Use After Free

Related identifiers

CVE-2026-11307

BDU:2026-13143

ECHO-316D-D3C5-C35F