8.3 HighCWE-122
CVE-2026-12010
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 26 Oct
0.3%probability of exploitation in the next 30 days
Higher than 17% of scored CVEs
SeverityCVSS
8.3High
Description NVD
Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Coverage 1 article · 1 outlet
- Chrome 149 Patches 28 Flaws, Several Critical UAF BugsSecurityOnline · first in our coverage · mentions it in passing