Buffer overflow in Google Chrome

CVE-2026-4455

Heap buffer overflow in PDFium in Google Chrome prior to 146.0.7680.153 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: High)

Vulnerability class: Buffer Overflow

EPSS: 0.000 (9.7th percentile) — read the EPSS interpretation.