What the vulnerability does
01Description
Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVSS base score
—
Key dates
02Disclosure timeline
November 6, 2025
CVE published
February 26, 2026
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2021-28620 Adobe Animate heap corruption vulnerability could lead to arbitrary code execution
CVE-2026-22854 FreeRDP has a heap-buffer-overflow in drive_process_irp_read
CVE-2019-9136
CVE-2026-4152 GIMP JP2 File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
CVE-2024-34771
