9.6 Critical
CVE-2026-10881
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.6%probability of exploitation in the next 30 days
Higher than 50% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Coverage 1 article · 1 outlet
- Chrome 149 Patches 429 VulnerabilitiesSecurityWeek · first in our coverage