You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
heap buffer overflow
About this tag
Heap buffer overflow is a recurring memory corruption vulnerability discussed across multiple WindowsForum threads, primarily in the context of Google Chrome and Microsoft Edge. Recent coverage highlights high-severity CVEs affecting Chrome components such as Codecs, ANGLE, WebML, CSS engine, and WebAudio, as well as a Microsoft hex conversion flaw. These bugs typically allow remote code execution via crafted HTML pages and may enable sandbox escape after renderer compromise. Threads emphasize the importance of prompt patching, understanding exploitability based on heap layout and mitigations, and the operational impact on enterprise defenders. The tag consistently ties heap buffer overflows to browser security, memory safety, and real-world threat scenarios.
CVE-2026-12019 is a high-severity heap buffer overflow in Chrome’s Codecs component, disclosed by Chrome on June 11, 2026, affecting Google Chrome on Linux and ChromeOS before version 149.0.7827.115 and potentially enabling sandbox escape through a crafted HTML page. The vulnerability is not the...
Google’s CVE-2026-10929 was published on June 4, 2026, as a high-severity heap buffer overflow in Chrome’s ANGLE graphics layer on Android before version 149.0.7827.53, with a potential sandbox escape path after renderer compromise. The bug is not the kind of drive-by catastrophe that lets any...
CVE-2026-31789 is the kind of Microsoft vulnerability that immediately grabs attention because it combines two words security teams hate seeing together: heap buffer overflow. The flaw sits in hexadecimal conversion, a routine that sounds mundane but often lives close to parsing, formatting, and...
Microsoft has now published guidance for CVE-2026-5858, a critical heap buffer overflow in WebML affecting Google Chrome before version 147.0.7727.55. The flaw can be triggered by a crafted HTML page, which means a remote attacker could potentially achieve arbitrary code execution through...
A newly disclosed **heap buffer overflow in Chrome’s CSS engine** has put one of the browser’s most ubiquitous attack surfaces back under the microscope. The flaw, tracked as **CVE-2026-4442**, affects Google Chrome versions prior to **146.0.7680.153** and, according to Microsoft’s Security...
Chromium’s latest browser security issue underscores a familiar truth: the web remains one of the most dangerous places to process untrusted content, and even a single crafted HTML page can still trigger memory corruption in a modern engine. CVE-2026-4673 is a heap buffer overflow in WebAudio...