Skip to content
NewA calmer, faster ZeroHour
Vulnerability2

CVE-2026-2648

CVSS 3.1
8.8 high
EPSS
<1%p40
Published
·
Modified
Analyze CVE-2026-2648 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Heap buffer overflow in PDFium in Google Chrome prior to 145.0.7632.109 allowed a remote attacker to perform an out of bounds memory write via a crafted PDF file. (Chromium security severity: High)

Vendors
google
Products
chrome
Weakness
CWE-122
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news

1 story