CVE-2026-10960

{"id": "CVE-2026-10960", "cveTags": [], "metrics": {}, "published": "2026-06-04T23:16:59.013", "references": [{"url": "https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html", "source": "chrome-cve-admin@google.com"}, {"url": "https://issues.chromium.org/issues/507258786", "source": "chrome-cve-admin@google.com"}], "vulnStatus": "Received", "weaknesses": [{"type": "Primary", "source": "chrome-cve-admin@google.com", "description": [{"lang": "en", "value": "CWE-457"}]}], "descriptions": [{"lang": "en", "value": "Uninitialized Use in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)"}], "lastModified": "2026-06-04T23:16:59.013", "sourceIdentifier": "chrome-cve-admin@google.com"}