CVE Catalog
CVE-2026-17848
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.23%
13th percentile - higher than 13% of all known CVEs
Summary
Integer overflow in Codecs in Google Chrome allowed a remote attacker to potentially perform a sandbox escape via a crafted video file.
Risk Assessment
An attacker may gain elevated privileges, leading to full browser compromise and potentially the entire system.
Recommendation
Update Google Chrome to version 151.0.7922.72 or later.
Original NVD description (English source)
Integer overflow in Codecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)