CVE-2026-10966
Google Chrome, chrome
Inappropriate implementation in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: High)
- CVSS
- 9.6
- EPSS
- 0.30% 22.4% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.05