Threats tagged 'ghsa-cwh8-gvfg-jpgh'

CVE-2026-87520 is a use-after-free vulnerability in the Dawn component of Google Chrome on Android versions prior to 153.0.8010.36. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a critical severity with a CVSS score of 9.6. Google has published an advisory indicating a stable channel update addressing this issue.