CVE-2026-17758
Heap buffer overflow in Dawn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.6
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- EPSS probability
- 0.44%
- CWE
- CWE-122
- Published
- 2026-07-30
- Last modified
- 2026-07-30
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-42807 — A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec...
- CVE-2026-85103 — Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
- CVE-2026-87430 — Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
- CVE-2026-87579 — Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
- CVE-2026-87654 — Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote...
- CVE-2026-87527 — Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
- CVE-2026-53938 — OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)
- CVE-2026-81993 — Acrobat Reader | Heap-based Buffer Overflow (CWE-122)