cve-2026-6308

About this tag
CVE-2026-6308 is a high-severity vulnerability in the Chrome browser's Media component, involving an out-of-bounds read that could be exploited by a remote attacker. The flaw affects Chrome versions prior to 147.0.7727.101 and requires user interaction, such as specific UI gestures on a crafted HTML page, to complete an exploit chain. Because Microsoft Edge and other Chromium-based browsers share the same codebase, they inherit the exposure and rely on Google's release cadence for the fix. This tag covers discussions about the vulnerability's technical details, its impact on Chromium browsers, and the importance of updating to the patched version to mitigate the risk of memory-safety exploits.
  1. CVE-2026-6308: Chrome Media Out-of-Bounds Read—Fix to 147.0.7727.101

    CVE-2026-6308 is another stark reminder that Chrome’s most dangerous bugs are often not flashy logic failures but low-level memory-safety issues hiding in the browser’s media stack. Google says an out-of-bounds read in Media affected Chrome versions before 147.0.7727.101, and that a remote...