Heap Buffer Overflow in Google Chrome WebRTC Component

CVE-2026-12447

What is CVE-2026-12447?

A vulnerability exists in the WebRTC component of Google Chrome that allows remote attackers to execute arbitrary code within a sandboxed environment by exploiting a heap buffer overflow. This can occur through a specially crafted HTML page, potentially leading to unauthorized actions within a user's browser session. It is critical for users to update their browsers to the latest version to mitigate risks associated with this vulnerability.

References