CVE-2026-9875
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk16th percentile - higher than 16% of all known CVEs
Summary
An out-of-bounds read vulnerability in WebGL in Google Chrome on Android prior to version 148.0.7778.216 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
Successful exploitation may allow an attacker to break out of the browser sandbox and gain access to the underlying Android operating system, posing a critical risk to data confidentiality and integrity.
Recommendation
Immediately update Google Chrome on Android to version 148.0.7778.216 or later. Notify users about the required update.
Original NVD description (English source)
Out of bounds read in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)