9.6 CriticalCWE-787
CVE-2026-9872
Google Chrome vulnerability
GoogleChrome
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.4%probability of exploitation in the next 30 days
Higher than 31% of scored CVEs
SeverityCVSS
9.6Critical
Description NVD
Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Coverage 1 article · 1 outlet
- Google releases Chrome 148, fixing 151 flaws with two critical CVEsSecurityWeek · first in our coverage