CVE-2026-4455 - Vulnerability Analysis

Overview

Google Chrome < 146.0.7680.153 contains a heap buffer overflow caused by improper handling of crafted PDF files in PDFium, letting remote attackers potentially exploit heap corruption.

Severity & Score

Impact

Remote attackers can exploit heap corruption, potentially leading to arbitrary code execution or browser compromise.

Mitigation

Update to version 146.0.7680.153 or later.

References

• https://issues.chromium.org/issues/488585504
• https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_18.html

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 22, 2026

🟠 CVE-2026-4455 - High (8.8) Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High) 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-4455/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner