CVE-2026-7951
HighSummary
An out of bounds write in WebRTC in Google Chrome prior to version 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
Risk Assessment
This vulnerability could lead to remote code execution, posing a significant security risk to systems using this browser.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability.
Other vulnerabilities in WebRTC w Google Chrome
See all- CVE-2017-5009High
WebRTC in Google Chrome prior to version 56.0.2924.76 for Linux, Windows, and Mac, and 56.0.2924.87 for Android, failed to perform proper bounds checking, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2023-3727High
A use after free vulnerability in WebRTC in Google Chrome prior to version 115.0.5790.98 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Original NVD description (English source)
Out of bounds write in WebRTC in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)