CVE-2026-84351: Buffer Overflow
Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
Which systems are affected?
The issue affects Google Chrome on Windows before version 152.0.7977.75. The provided information does not identify impact on other operating systems.
What does an attacker need to exploit this vulnerability?
The attacker must first compromise the Chrome renderer process. They can then use a crafted HTML page to trigger the GPU buffer overflow and execute code outside Chrome's sandbox.
Are users exposed simply by visiting a malicious page?
Not based on the available information. A crafted HTML page is part of the exploit chain, but the renderer process must already be compromised.
How can I determine whether an installation is affected?
Check the Chrome version on Windows. Versions earlier than 152.0.7977.75 are affected according to the provided information.