CVE-2026-95357Not scoredCWE-787

CVE-2026-95357: Google Chrome vulnerability

Google · Chrome

Vendor fix available · Affected: Google Chrome · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

0.5%probability of exploitation in the next 30 days

40th percentile

050100

Higher than 40% of scored CVEs

Not scored yet. NVD has not published a CVSS score.

DescriptionNVD

Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Out-of-bounds Write · Memory Corruption
Vendor: Google
Published: September 2026
Band: Unlikely (under 1%), September 2026

Coverage2 articles · 2 outlets

One row per outlet, in order of first report. First in our coverage: SecurityOnline, 23 Sep.

Full timeline

Quiet for 7 weekslast report 24 Sep2 articles2 outlets

First report
Article
Running total

Show as table

2 articles about CVE-2026-95357 from 2 outlets
Published (UTC)	Outlet	Headline
23 Sep 02:49	SecurityOnline	Google Chrome 154 Fixes 108 Flaws, Including Three Critical Bugs
24 Sep 11:36	Malwarebytes	Chrome Update Fixes 11 Critical Flaws Including ANGLE Bugs

24 Sep 11:36
Chrome Update Fixes 11 Critical Flaws Including ANGLE Bugs
Malwarebytes · mentions it in passing
23 Sep 02:49
Google Chrome 154 Fixes 108 Flaws, Including Three Critical Bugs
SecurityOnline · first in our coverage · mentions it in passing

New articles also arrive in the RSS feed.