Buffer Overflow Vulnerability in Google Chrome's PDFium Component

CVE-2026-93381

What is CVE-2026-93381?

A buffer overflow vulnerability exists in the PDFium component of Google Chrome on Windows, which could be exploited by a remote attacker using social engineering tactics. By delivering a specially crafted PDF file, the attacker may execute arbitrary code within the browser's sandbox environment. This presents potential risks to users if they inadvertently open malicious PDF documents.

References