CVE-2026-10018

EUVD-2026-33160
Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 9.19%
Affected Products (NVD)
VendorProductVersion
googlechrome
𝑥
< 148.0.7778.216
googlechrome
𝑥
< 148.0.7778.215
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
chromium
bookworm
150.0.7871.100-1~deb12u1
fixed
bookworm (security)
154.0.8037.92-1~deb12u1
fixed
forky
154.0.8037.92-1
fixed
sid
154.0.8037.92-1
fixed
trixie
150.0.7871.181-1~deb13u1
fixed
trixie (security)
154.0.8037.92-1~deb13u1
fixed
webkit2gtk
bookworm
vulnerable
bookworm (security)
vulnerable
forky
vulnerable
sid
2.54.1-1
fixed
trixie
vulnerable
trixie (security)
2.54.0-1~deb13u2
fixed
wpewebkit
bookworm
ignored
forky
2.54.0-2
fixed
sid
2.54.1-1
fixed
trixie
ignored
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
chromium-browser
jammy
not-affected
noble
not-affected
resolute
not-affected
webkitgtk
bionic
ignored
jammy
dne
noble
dne
resolute
dne
xenial
ignored
webkit2gtk
bionic
ignored
focal
ignored
jammy
ignored
noble
deferred
resolute
deferred
xenial
ignored
qtwebkit-source
bionic
ignored
jammy
dne
noble
dne
resolute
dne
xenial
ignored
qtwebkit-opensource-src
bionic
ignored
focal
ignored
jammy
ignored
noble
ignored
resolute
dne
xenial
ignored
wpewebkit
focal
ignored
jammy
ignored
noble
dne
resolute
dne
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
webkit2gtk3
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-devel
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-jsc
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed
webkit2gtk3-jsc-devel
RHEL 8
0:2.54.0-1.el8_10
fixed
RHEL 9
0:2.54.0-1.el9_8
fixed