CVE-2026-9876
Published May 28, 2026
Last updated 2 months ago
CVSS critical 9.6
Android
Google Chrome
Chromium
AI description
Automated description summarized from trusted sources.
CVE-2026-9876 describes a "use after free" vulnerability found within the WebGL component of the Chromium browser. Specifically, this flaw affects Google Chrome on Android versions prior to 148.0.7778.216. This vulnerability could be exploited by a remote attacker. By crafting a malicious HTML page, an attacker might be able to achieve a sandbox escape.
- Description
- Use after free in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
- Source
- chrome-cve-admin@google.com
- NVD status
- Analyzed
- Products
- chrome
CVSS 3.1
- Type
- Secondary
- Base score
- 9.6
- Impact score
- 6
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
- Severity
- CRITICAL
- chrome-cve-admin@google.com
- CWE-416
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "E59192D9-BF13-4B43-B69F-869A6BF83955",
"versionEndExcluding": "148.0.7778.216",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
},
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26",
"vulnerable": false
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "AND"
}
]