CVE Catalog

CVE-2026-10955

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Summary

In Google Chrome on Windows prior to version 149.0.7827.53, a 'Type Confusion' vulnerability in ANGLE allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Risk Assessment

This vulnerability could lead to serious security breaches, including remote code execution and takeover of the user's system.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Type Confusion in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS