CVE-2026-3061 - Vulnerability Analysis
CriticalCVSS: 9.1Last Updated: February 25, 2026
Google Chrome - Out of Bounds Read
Published: February 23, 2026Updated: February 25, 2026Remote Exploitable
Overview
Google Chrome < 145.0.7632.116 contains an out of bounds read caused by improper memory handling in Media component, letting remote attackers read memory via crafted HTML page, exploit requires no special privileges.
Severity & Score
Severity: Critical
CVSS Score: 9.1
Impact
Remote attackers can read out of bounds memory, potentially leaking sensitive information.
Mitigation
Update to version 145.0.7632.116 or later.
References
Related Resources
Details
- CVE ID
- CVE-2026-3061
- Severity
- Critical
- CVSS Score
- 9.1
- Type
- out_of_bounds_rw
- Status
- confirmed
CWE
- CWE-125
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H