CVE Catalog
CVE-2026-15900
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.26%
17th percentile - higher than 17% of all known CVEs
Summary
A use-after-free vulnerability in GPU in Google Chrome on Android prior to 150.0.7871.128 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
An attacker can bypass browser isolation mechanisms and gain access to the operating system, posing a critical threat to device security.
Recommendation
Update Google Chrome on Android to version 150.0.7871.128 or later.
Original NVD description (English source)
Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)