CVE-2026-95318
9.6 CRITICALPublished 2026-09-29 · Updated 2026-09-30
AI risk analysis
- Summary
- This flaw involves a buffer overflow in Google Chrome prior to version 154.0.8037.57, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page.
- Exploitability
- Exploitation is relatively straightforward with the necessary conditions being the presence of an unpatched version of Chrome and a user visiting a maliciously crafted webpage.
- Blast radius
- If exploited, this flaw could result in full system compromise, as the attacker could execute arbitrary code outside the sandbox, potentially leading to data theft, system damage, or further exploitation of the system.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to Google Chrome 154.0.8037.57 or later.
rcewebchromebuffer-overflow
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Buffer overflow in Video in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-122
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-95349
- CRITICALCVE-2026-95283
- CRITICALCVE-2026-95350
- CRITICALCVE-2026-101074PoC
- CRITICALCVE-2026-101081PoC
- CRITICALCVE-2026-102304
- CRITICALCVE-2026-102308
- CRITICALCVE-2026-102309
Related by shared AI tags and CWE weakness class. Browse the full archive.