cve 2026 2648

  1. CVE-2026-2648 Heap Overflow in PDFium Fixed in Chrome 145

    A newly disclosed high‑severity vulnerability in Chromium’s PDF rendering engine, PDFium, has been assigned CVE‑2026‑2648 and patched upstream in Chrome 145.0.7632.109 (and sibling builds). The flaw is a heap buffer overflow that — when triggered by a specially crafted PDF — can result in...