CVE Catalog
CVE-2026-17727
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
An attacker can escape the browser sandbox, potentially leading to arbitrary code execution on the user's device.
Recommendation
Update Google Chrome on Android to version 151.0.7922.72 or later.
Original NVD description (English source)
Out of bounds write in WebGL in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)