What the vulnerability does
01Description
Heap buffer overflow in WebRTC in Google Chrome prior to 147.0.7727.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVSS base score
—
Key dates
02Disclosure timeline
April 28, 2026
CVE published
April 30, 2026
Record updated
External resources
