Back Endorlabs

CVE-2026-10966 chromium

Endorlabs • June 6, 2026

Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chrome Vulnerabilities Allow Arbitrary Code Execution and System Crashes Google has released a critical security update for Chrome, addressing two high-severity vulnerabilities that could allow arbitrary code execution and denial-of-service attacks. Users on Windows, macOS, and Linux are affected, with the browser version updated to 144.0.7559.132/.133. The update is being rolled out to mitigate these risks. 503 sources 49

Extracted Entities

CVE-2026-10966 chromium

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)

Tools (1)

Vulnerabilities (1)