CVE-2026-10979
Out-of-Bounds Read in Google Chrome
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: Chrome
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| chrome | to 149.0.7827.53 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-125 | The product reads data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an out of bounds read in ANGLE within Google Chrome versions prior to 149.0.7827.53. It allows a remote attacker to read memory outside the intended bounds by using a specially crafted HTML page.
As a result, the attacker can potentially obtain sensitive information from the process memory.
How can this vulnerability impact me? :
This vulnerability can impact you by allowing a remote attacker to access potentially sensitive information stored in the memory of the Chrome process.
Such information disclosure could lead to privacy breaches or further exploitation depending on the nature of the data accessed.