Description

Buffer overflow in Network in Google Chrome prior to 151.0.7922.173 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "8.8",
  "pubDate": "2026-08-20T21:17:10.420Z",
  "pubdate": "2026-08-20T21:17:10.420Z",
  "executiveSummary": "A critical buffer overflow vulnerability resides within the Network component of Google Chrome prior to version 151.0.7922.173.\nThe vulnerability allows a remote attacker to execute arbitrary code outside the browser sandbox context.\nExploitation requires a targeted user to navigate to a specifically crafted HTML page controlled by the adversary.\nThe risk implications are severe, as successful exploitation results in arbitrary code execution on the underlying host system, effectively bypassing browser isolation mechanisms designed to contain web-based threats.\nThe attack vector is entirely remote, leveraging web content parsing and network stack handling to trigger memory corruption within the targeted browser instance.",
  "technicalDetails": "The vulnerability is a classic buffer overflow condition occurring within the Network component of Google Chrome.\nAffected software versions include Google Chrome prior to 151.0.7922.173.\nThe root cause stems from improper boundary checking and memory management during the processing of network data or HTTP responses triggered by malicious web content.\nThe attack flow initiates when a remote attacker induces a victim to load a crafted HTML page containing malicious payloads designed to interact with the vulnerable Network component.\nUpon rendering or processing the malicious content, the browser initiates network requests or data handling routines that exceed the allocated bounds of a memory buffer, resulting in a heap or stack-based buffer overflow.\nThis memory corruption overwrites adjacent critical data structures, instruction pointers, or function pointers within memory.\nBy carefully crafting the input payload within the HTML page, the attacker achieves reliable control over the instruction pointer.\nConsequently, execution is diverted to malicious shellcode or return-oriented programming (ROP) chains.\nCrucially, the resulting arbitrary code execution successfully escapes the browser sandbox, granting the attacker unauthorized access to the host operating system with the privileges of the logged-in user.\nThe vulnerability requires no prior authentication and can be exploited over the network via standard web browsing vectors, provided the user interacts with the crafted content."
}