pdfium security

  1. CVE-2026-6306: Patch PDFium Heap Overflow in Chrome 147 and Edge ASAP

    Chromium’s CVE-2026-6306 is exactly the kind of browser vulnerability that looks narrow at first glance but carries broad real-world risk: a heap buffer overflow in PDFium affecting Google Chrome prior to 147.0.7727.101. Google’s April 15, 2026 stable update says the flaw was fixed in Chrome...
  2. Chrome Windows PDFium Fix: CVE-2026-6361 Heap Overflow Patched

    Google has patched a high-severity heap buffer overflow in PDFium that affects Chrome on Windows versions before 147.0.7727.101, closing off a path that could let an attacker execute code inside the browser sandbox through a crafted PDF. The fix landed in the April 15, 2026 Stable Channel...