Search: CVE-2026-9872

CVE-2026-9872 is a critical out-of-bounds write vulnerability in the GPU component of Google Chrome on Android versions prior to 148.0.7778.216. This flaw could allow a remote attacker to potentially escape the browser sandbox by convincing a user to visit a crafted HTML page. The vulnerability has a high CVSS score of 9.6, indicating severe impact on confidentiality, integrity, and availability. Google has published an advisory indicating the issue is addressed in Chrome version 148.0.7778.