CVE-2026-6361Disclosure(google / chrome)

LOWCVSS 8.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch google chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)

google CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_15.html

Other references

https://issues.chromium.org/issues/500036290

Weakness type (CWE)

CWE-122

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome

Threat summary

Patch or workaround signal is available
5 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 2d ago at 2 mentions (2026-04-15); latest day: 1
5 total mentions across 3 days

Affected systems

Vendors

google

Products

chrome

Deep dive

Activity timeline5 mentions / 3d

Signal classification2 categories

Disclosure

480.0%

Patch

120.0%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-04-15	2	Disclosure2
2026-04-16	2	Disclosure2
2026-04-17	1	Patch1

Full discourse5 posts

WindowsForum@windowsforum174d
Patch
🪟 CVE-2026-6361: Chrome finally patches the “crafted PDF goes brrr” bug. Because nothing says safe browsing like trusting humans not to click two buttons. Install the update. https://windowsforum.com/threads/chrome-windows-pdfium-fix-cve-2026-6361-heap-overflow-patched.413812/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #ChromeUpdate #WindowsVulnerability #PdfiumSecurity #Cve20266361
Post summary
The post announces that Chrome has patched CVE-2026-6361, a heap‑overflow bug in PDFium, and urges users to install the update.
0001052
1.1K followersView on X
VulDB 🛡@vuldb176d
Disclosure
The severity is increased for this new vulnerability affecting Google Chrome (CVE-2026-6361) https://vuldb.com/vuln/357799
Post summary
The message conveys that the severity for CVE‑2026‑6361, a Google Chrome vulnerability, has been raised, with a reference to an external vulnerability database for further details.
0001075
2.1K followersView on X
CVE@CVEnew176d
Disclosure
CVE-2026-6361 Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to e… https://www.cve.org/CVERecord?id=CVE-2026-6361
Post summary
The text describes a heap buffer overflow (CVE-2026-6361) in PDFium affecting older Chrome builds on Windows, but offers no PoC, exploit code, active exploitation evidence, or patch details.
00000123
57.2K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds176d
Disclosure
CVE-2026-6361 Heap Buffer Overflow in PDFium in Google Chrome Prior to 147.0.7727.101 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6361
Post summary
A new heap buffer overflow in Chrome’s PDFium component (versions before 147.0.7727.101) has been disclosed, with no PoC, exploit, or patch information presented.
0000044
4.0K followersView on X
Kaitan ID Security@KaitanSecurity176d
Disclosure
⚠️ HIGH — CVE-2026-6361 Heap buffer overflow in PDFium in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who convin… CVSS 7.2 Full analysis → https://sec.kaitan.id/cves/CVE-2026-6361 #Google #CyberSecurity #InfoSec
Post summary
The tweet announces CVE-2026-6361, a heap buffer overflow affecting older Google Chrome Windows builds, noting its CVSS score but providing no PoC, exploit, or patch information.
0000010
145 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	chrome	-	-	-

Explore more

Back to dashboard google CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-6361

WindowsForum[verified]@windowsforumPatch

The post announces that Chrome has patched CVE-2026-6361, a heap‑overflow bug in PDFium, and urges users to install the update.

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The tweet announces CVE-2026-6361, a heap buffer overflow affecting older Google Chrome Windows builds, noting its CVSS score but providing no PoC, exploit, or patch information.

VulDB 🛡@vuldbDisclosure

The message conveys that the severity for CVE‑2026‑6361, a Google Chrome vulnerability, has been raised, with a reference to an external vulnerability database for further details.

CVE@CVEnewDisclosure

The text describes a heap buffer overflow (CVE-2026-6361) in PDFium affecting older Chrome builds on Windows, but offers no PoC, exploit code, active exploitation evidence, or patch details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

A new heap buffer overflow in Chrome’s PDFium component (versions before 147.0.7727.101) has been disclosed, with no PoC, exploit, or patch information presented.