← Back to search

CVE-2026-95318

9.6 CRITICAL

Published 2026-09-29 · Updated 2026-09-30

AI risk analysis

Summary
This flaw involves a buffer overflow in Google Chrome prior to version 154.0.8037.57, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.
Exploitability
Exploitation is relatively straightforward with the necessary conditions being the presence of an unpatched version of Chrome and a user visiting a maliciously crafted webpage.
Blast radius
If exploited, this flaw could result in full system compromise, as the attacker could execute arbitrary code outside the sandbox, potentially leading to data theft, system damage, or further exploitation of the system.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Google Chrome 154.0.8037.57 or later.
rcewebchromebuffer-overflow

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-122

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.