CVE-2026-76036

CriticalCVSS 9.6

Published: 18/08/2026(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

35th percentile - higher than 35% of all known CVEs

Summary

Buffer overflow in Dawn in Google Chrome on Android prior to 151.0.7922.169. A remote attacker can exploit a crafted HTML page to execute arbitrary code outside the sandbox.

Risk Assessment

An attacker could execute code outside the sandbox, potentially leading to full compromise of the Android device.

Recommendation

Update Google Chrome on Android to version 151.0.7922.169 or later to fix the vulnerability.

Original NVD description (English source)

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)