NetSight
IP …
high8.8

CVE-2026-10002

Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file.

Impact

Use after free in PDFium in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

Affected products

VendorProductAffected versions
GoogleChrome
before 148.0.7778.215
before 148.0.7778.216

Weakness classification

CWE-416

References