CVE-2026-7973
Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Ver en NVDAnálisis
Google Chrome on Windows is vulnerable to a sandbox escape via a crafted HTML page. An attacker can exploit an integer overflow in the Dawn component to execute code outside of the browser's restricted environment. Ensure your browser is updated to version 148.0.7778.96 or later to protect against this remote attack vector.
Severidad
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCWE-472EPSS
Sin puntaje EPSS aún (CVE muy reciente).
Afecta
google:chromemicrosoft:windowsDescripción técnica
Integer overflow in Dawn in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)