PT-2026-48780 · Google · Google Chrome

CVE-2026-12034

·

Published

2026-06-02

·

Updated

2026-08-31

CVSS v3.1

8.3

High

VectorAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 149.0.7827.115
Description Insufficient validation of untrusted input in the Linux Toolkit Theming component allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by using a malicious file. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the underlying system.
Recommendations Update Google Chrome on Linux to version 149.0.7827.115 or later.

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13201
CVE-2026-12034
ECHO-CD52-AAD2-2B33
OPENSUSE-SU-2026:11029-1
OPENSUSE-SU-2026:20980-1
OPENSUSE-SU-2026:21135-1

Affected Products

Google Chrome