Vulnerability intelligence
CVE-2026-84352
Use after free in WebGL in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
CVSS Score
9.6
Critical
EPSS — Exploit Probability
0.5%
Riskier than 39% of all CVEs · checked 2026-10-16
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Sep 2, 2026 · latest Sep 2, 2026
Coverage timeline
-
Two critical Chrome flaws put users at risk on malicious websiteswww.malwarebytes.com · Sep 2, 2026