What the vulnerability does
01Description
Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
CVSS base score
—
Key dates
02Disclosure timeline
November 6, 2025
CVE published
February 26, 2026
Record updated
External resources
