CVE-2026-93381

Published: September 17th, 2026
Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code inside the sandbox via a crafted PDF file. (Chromium security severity: High)
Unknown
CVSS v2:

Status

DocFilters Release Package State Justification Comment
daily pdfium (5060) Needs Triage
26.3 pdfium (5060) Needs Triage
26.2 pdfium (5060) Needs Triage
26.1 pdfium (5060) Needs Triage
25.4 pdfium (5060) Needs Triage
25.3 pdfium (5060) Needs Triage
25.2 pdfium (5060) Needs Triage
25.1 pdfium (5060) Needs Triage
24.4 pdfium (5060) Needs Triage
24.4.0 pdfium (5060) Needs Triage
24.3 pdfium (5060) Needs Triage
24.2 pdfium (5060) Needs Triage
24.1 pdfium (5060) Needs Triage
23.3 pdfium (5060) Needs Triage
23.2 pdfium (5060) Needs Triage
23.1 pdfium (5060) Needs Triage
22.4 pdfium (5060) Needs Triage
22.3 pdfium (5060) Needs Triage

Severity score breakdown

References