Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Chrome before 148 can run code from malicious video
published 5 months ago
Summary
Versions of Google Chrome older than 148.0.7778.168 may be tricked by a specially crafted video file into running unwanted code within the browser's sandbox. This could let an attacker take actions on the computer that the user did not intend. Updating Chrome to the latest version resolves the risk.
What to do
- Update echo chromium to version 148.0.7778.167-1~deb12u1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Echo | echo | chromium |
< 148.0.7778.167-1~deb12u1 Fix: upgrade to 148.0.7778.167-1~deb12u1
|
Original advisory text
ECHO-e759-82c3-dfdb
References
Timeline
Published15 May 2026
Updated21 May 2026
First seen21 May 2026
Sources
ECHO-e759-82c3-dfdb · OSV
Track software like this
Free during beta