CVE-2026-12030
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
An out of bounds write in GPU in Google Chrome on Android prior to version 149.0.7827.115 allowed a remote attacker who compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
This vulnerability poses a high risk to organizations as it may lead to unauthorized access to systems and user data.
Recommendation
It is recommended to update Google Chrome on Android to version 149.0.7827.115 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)