CVE Catalog

CVE-2026-16419

CriticalCVSS 9.6
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.16%

6th percentile - higher than 6% of all known CVEs

Summary

Out-of-bounds read and write vulnerability in ANGLE in Google Chrome on Android prior to 150.0.7871.182. A remote attacker could potentially escape the sandbox via a crafted HTML page.

Risk Assessment

An attacker could escape the browser sandbox and gain access to the operating system, potentially leading to full device compromise.

Recommendation

Update Google Chrome on Android to version 150.0.7871.182 or later.

Original NVD description (English source)

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS