Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Chromium CVE-2026-93382: Use after free in PDFium
Chromium: CVE-2026-18012 Use after free in PDFium
Chromium: CVE-2026-17875 Use after free in PDFium
Chromium: CVE-2026-14108 Use after free in PDFium
Chromium: CVE-2026-14404 Inappropriate implementation in PDFium
Double free vulnerability in the j2kreadppmv3 function in OpenJPEG before r2997, as used in PDFium in Google Chrome, allows remote attackers to cause a denial of service (process crash) via a crafted PDF.