{"id":"CVE-2026-95318","published":"2026-09-29T18:17:24.060","lastModified":"2026-09-30T04:18:42.847","description":"Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.html","tags":[]},{"url":"https://issues.chromium.org/issues/556576976","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"This flaw involves a buffer overflow in Google Chrome prior to version 154.0.8037.57, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.","exploitability":"Exploitation is relatively straightforward with the necessary conditions being the presence of an unpatched version of Chrome and a user visiting a maliciously crafted webpage.","blast_radius":"If exploited, this flaw could result in full system compromise, as the attacker could execute arbitrary code outside the sandbox, potentially leading to data theft, system damage, or further exploitation of the system.","remediation":"Upgrade to Google Chrome 154.0.8037.57 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","chrome","buffer-overflow"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-30T08:53:30.184Z"}}