CVE Catalog
CVE-2026-19170
CriticalCVSS 9.6Summary
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109. A remote attacker could exploit a crafted HTML page to potentially perform a sandbox escape.
Risk Assessment
Sandbox escape could allow an attacker to execute code outside browser restrictions, posing a serious security threat to the device.
Recommendation
Update Google Chrome on Android to version 151.0.7922.109 or later as soon as possible.
Original NVD description (English source)
Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)