Vulnerability in Google Chrome

[ Description ]Official description

Use after free in PDFium in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)

[ Fixes ]Fixes and patches

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ Advisories ]Government CERT advisories

• CERT-FR15 Oct 2026CERTFR-2026-AVI-1326

  Multiple vulnerabilities in Palo Alto Networks products Translated from French

  Multiple vulnerabilities have been discovered in Palo Alto Networks products. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and remote denial of service. Palo Alto…

  CVE-2026-87464CVE-2026-87646CVE-2026-87445+458 more CVEs
• CERT-FR7 Oct 2026CERTFR-2026-AVI-1267

  Multiple vulnerabilities in Microsoft Edge Translated from French

  Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause a security problem not specified by the vendor.

  CVE-2026-95284CVE-2026-95286CVE-2026-95289+105 more CVEs
• CERT-FR23 Sep 2026CERTFR-2026-AVI-1213

  Multiple vulnerabilities in Google Chrome Translated from French

  Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.

  CVE-2026-95284CVE-2026-95286CVE-2026-95289+105 more CVEs

[ References ]References

• chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0856730748.htmlRelease NotesVendor Advisory
• issues.chromium.org/issues/556535630Permissions Required