CVE-2026-91737

CVE-2026-91737 — Chrome renderer RCE PDFium A reentrant PDF JavaScript action unloads CPDFPage while Chromium's PopulateAnnotationLinks holds its raw page handle. This PoC reclaims the allocation, recovers ASLR, and executes an attacker-supplied 40-byte ARM64 payload in the sandboxed PDF renderer...

PDFium Component DoS

The PDFium component vulnerability in Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability allows a remote attacker to trigger a denial of service by sending a specially crafted HTML page...

PDFium Component DoS

The PDFium component vulnerability in Google Chrome and Microsoft Edge web browsers is related to use-after-free memory management. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted PDF file...

CVE-2026-121113

A buffer overflow flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567106301 Mitigation --- CME Mitigation Guidance 2026-11-06 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of...

CVE-2026-121179

An use after free flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567936263 Mitigation --- CME Mitigation Guidance 2026-11-06 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of...

SUSE CVE-2026-121113

Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

SUSE CVE-2026-121166

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

SUSE CVE-2026-121179

Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121166

A type confusion flaw was found in the PDFium component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/566111382 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of...

CVE-2026-121179

Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121166

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-121113

Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-121179

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-121113

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file...

Linux Distros Unpatched Vulnerability : CVE-2026-121166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file...

CVE-2026-121179

Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-121179

Use after free in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121166

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

DEBIAN-CVE-2026-121166

Type confusion in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...

CVE-2026-121113

Buffer overflow in PDFium in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. Chromium security severity: High...