VULNERABILITY INTELLIGENCE

CVE-2026-10998

CVSS score4 MEDIUM
EPSS probability0.11%
CISA KEVNot currently listed
Published2026-06-04
Last modified2026-07-22
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. (Chromium security severity: Medium)

Weakness classification

  • chrome-cve-admin@google.com: CWE-125

Primary references