CVE-2026-6361

Summary

Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)

Affected Software

VendorProductVersion RangeStatus
GoogleChrome147.0.7727.101 < 147.0.7727.101affected

Weaknesses

  • CWE-122: Heap buffer overflow

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References