EUVD-2026-40757
GHSA-4cxp-624p-hxfg
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Browser sandbox limits readable memory to the renderer process, warranting C:L over C:H; all other metrics align with network delivery via crafted page requiring user navigation.
Primary rating from Vendor (google).
CVSS VectorVendor: google
Lifecycle Timeline
4DescriptionCVE.org
Integer overflow in WebNN in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)
AnalysisAI
Integer overflow in Chrome's WebNN (Web Neural Network API) component prior to version 150.0.7871.47 enables remote attackers to read potentially sensitive data from browser process memory by luring a user to a crafted HTML page. The attack requires no privileges and no special configuration, but mandates user interaction - the victim must navigate to a malicious page. No public exploit identified at time of analysis; CISA SSVC rates exploitation as none with partial technical impact, and Google itself assigned a Low Chromium severity, suggesting real-world impact is constrained by browser sandboxing despite the CVSS C:H rating.
Technical ContextAI
WebNN is the Web Neural Network API, a browser-level interface exposing hardware-accelerated ML inference to web applications - enabled by default in Chrome. The vulnerability is classified as CWE-457 (Use of Uninitialized Variable), which is noted to be the downstream effect of the stated integer overflow: an overflowed index or size calculation causes the WebNN subsystem to access uninitialized or adjacent memory regions, exposing their contents to the attacker-controlled page. This class of flaw is common in native-code parser or tensor-processing paths where array bounds are computed from attacker-supplied inputs. The affected product is confirmed by EUVD-2026-40757 as Google Chrome in all releases prior to 150.0.7871.47. No CPE strings were included in the provided intelligence data; the canonical NVD record and Chrome Releases advisory serve as authoritative version references.
RemediationAI
Upgrade Google Chrome to version 150.0.7871.47 or later - this is the vendor-released patch per the Chrome Releases advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0175352312.html. Enterprise administrators should deploy this update via their endpoint management platform (e.g., Google Admin, Intune, or a software deployment tool) as a priority. If immediate patching is blocked, restrict WebNN feature access via Chrome enterprise policy (disabling experimental web platform features), though this trade-off breaks web applications dependent on hardware-accelerated ML inference. Content filtering proxies can block navigation to untrusted or unknown external domains, reducing exposure to crafted pages, at the cost of reduced browsing freedom. There are no known effective workarounds that fully mitigate the vulnerability without patching.
Same weakness CWE-457 – Use of Uninitialized Variable
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: Moderate| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today