Threats tagged 'ghsa-v6gg-mwwf-qh2v'

CVE-2026-95322 is a critical out-of-bounds write vulnerability in the GPU component of Google Chrome on Android. It affects versions prior to 154.0.8037.57. A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to execute arbitrary code outside the sandbox. The vulnerability has a high CVSS score of 8.3 and was publicly disclosed on September 29, 2026. Google has released an update to address this issue.