Heap Buffer Overflow Vulnerability in Google Chrome's PDFium Component

CVE-2026-6306

What is CVE-2026-6306?

A heap buffer overflow vulnerability in the PDFium component of Google Chrome prior to version 147.0.7727.101 allows attackers to exploit this weakness through specially crafted PDF files. When a user opens a malicious PDF, it can lead to potential arbitrary code execution within the browser's sandbox environment, posing significant risks to users' data security. It's crucial for users to upgrade to the latest version of Chrome to mitigate this threat and protect their systems from potential exploitation.

References