Description
Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
Published: 2026-04-15
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote Code Execution
Action: Update Chrome
AI Analysis

Impact

A heap buffer overflow exists in the PDF rendering component of Google Chrome that allows a remote attacker to execute arbitrary code inside the browser sandbox by delivering a specially crafted PDF file. The vulnerability is identified as both a heap buffer overflow (CWE-122) and an adjacent buffer overflow (CWE-787) and carries a Chromium severity of High.

Affected Systems

Google Chrome browsers prior to version 147.0.7727.101 are affected. The issue is limited to the PDFium rendering engine used for processing PDF files within the Chrome browser.

Risk and Exploitability

The flaw can be triggered by a PDF file that an untrusted user opens in Chrome, which can lead to arbitrary code execution with at least the privileges of the sandboxed browser process. The CVSS v3.1 score is 8.8, indicating a high severity. No publicly available exploit code is yet reported, and the vulnerability is not listed in the CISA KEV catalog. The risk remains high due to the local file-based nature of the trigger and the ability to run arbitrary code within the sandbox.

Generated by OpenCVE AI on April 17, 2026 at 06:56 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to version 147.0.7727.101 or newer.
  • Disable or restrict automatic opening of PDF files from untrusted sources.
  • Monitor users for anomalous activity such as unexpected browser crashes or unexpected processes.

Generated by OpenCVE AI on April 17, 2026 at 06:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6214-1 chromium security update
History

Fri, 17 Apr 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Thu, 16 Apr 2026 10:15:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Thu, 16 Apr 2026 00:15:00 +0000

Type Values Removed Values Added
Title PDFium Heap Buffer Overflow Allows Arbitrary Code Execution chromium-browser: Heap buffer overflow in PDFium
Weaknesses CWE-787
References
Metrics threat_severity

None

 cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

threat_severity

Important

Wed, 15 Apr 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 15 Apr 2026 22:30:00 +0000

Type Values Removed Values Added
Title PDFium Heap Buffer Overflow Allows Arbitrary Code Execution

Wed, 15 Apr 2026 19:30:00 +0000

Type Values Removed Values Added
Description Heap buffer overflow in PDFium in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
Weaknesses CWE-122
References

Subscriptions

Apple Macos
Google Chrome
Linux Linux Kernel
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-04-16T09:56:40.048Z

Reserved: 2026-04-14T18:12:23.161Z

Link: CVE-2026-6306

cve-icon Vulnrichment

Updated: 2026-04-16T09:56:31.901Z

cve-icon NVD

Status : Analyzed

Published: 2026-04-15T20:16:39.883

Modified: 2026-04-17T15:40:42.470

Link: CVE-2026-6306

cve-icon Redhat

Severity : Important

Publid Date: 2026-04-15T00:00:00Z

Links: CVE-2026-6306 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-04-17T07:00:08Z

Weaknesses