CVE-2026-2314
HIGHCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
3Description
Heap buffer overflow in Codecs in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Analysis
Heap buffer overflow in Google Chrome's codec implementation prior to version 145.0.7632.45 enables remote attackers to corrupt heap memory and potentially achieve arbitrary code execution through a malicious HTML page. The vulnerability requires user interaction to visit a crafted webpage but does not require special privileges, affecting all Chrome users. …
Sign in for full analysis, threat intelligence, and remediation guidance.
Remediation
Within 24 hours: Issue security alert to all staff advising against visiting untrusted websites and recommend using alternative browsers temporarily; document baseline of Chrome deployments across enterprise. Within 7 days: Implement network-based mitigations such as WAF rules to block malicious payloads, segment Chrome users to restricted network zones, and disable JavaScript execution where operationally feasible. …
Sign in for detailed remediation steps.
Priority Score
Vendor Status
Share
External POC / Exploit Code
Leaving vuln.today