CVE-2026-10998

MEDIUM

Google Chrome - Out-of-bounds Read

Title source: rule
STIX 2.1

Description

Out of bounds read in Media in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform an out of bounds memory read via malicious network traffic. (Chromium security severity: Medium)

Scores

CVSS v3 4.0
EPSS 0.0010
EPSS Percentile 1.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-125
Status published
Products (2)
google/chrome < 149.0.7827.53
Google/Chrome 149.0.7827.53
Published Jun 04, 2026
Tracked Since Jun 05, 2026