ANGLE vulnerabilities
66 known CVE vulnerabilities in ANGLE, translated and rated.
- CVE-2026-0908High
Use-after-free vulnerability in ANGLE component in Google Chrome prior to 144.0.7559.59. A remote attacker could potentially exploit heap corruption via a crafted HTML page.
- CVE-2026-14425Critical
A use-after-free vulnerability in the ANGLE component of Google Chrome prior to 150.0.7871.46 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-14411Critical
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-14398Critical
A use-after-free vulnerability in ANGLE in Google Chrome prior to 150.0.7871.46 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-14397Critical
An out-of-bounds write vulnerability in the ANGLE component of Google Chrome on Mac prior to version 150.0.7871.46 allows a remote attacker to potentially escape the sandbox via a crafted HTML page.
- CVE-2026-14382Critical
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-14152Critical
An out-of-bounds read and write vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-14044Critical
A Use-After-Free vulnerability in the ANGLE component in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as Low severity by the Chromium security team.
- CVE-2026-13883Critical
A type confusion vulnerability in the ANGLE component in Google Chrome prior to version 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as medium severity.
- CVE-2026-13859Critical
Inappropriate implementation in the ANGLE component in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-13780Critical
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-79142High
A buffer overflow in ANGLE in Google Chrome on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
- CVE-2026-15109Medium
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.115 allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page.
- CVE-2026-14418Medium
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to 150.0.7871.46 allows a remote attacker to leak cross-origin data via a crafted HTML page. The issue is rated as High severity by Chromium security.
- CVE-2026-14413High
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially escape the sandbox via a crafted HTML page.
- CVE-2026-14412High
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-14402Medium
An uninitialized use vulnerability in the ANGLE component of Google Chrome on Windows prior to version 150.0.7871.46 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2026-14401High
Insufficient validation of untrusted input in ANGLE in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-14400High
An out-of-bounds write vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially escape the sandbox via a crafted HTML page.
- CVE-2026-14396Medium
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.46 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- CVE-2026-14391Medium
An integer overflow in ANGLE in Google Chrome on Windows prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2026-14388Medium
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.46 allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page.
- CVE-2026-14386Medium
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.46 allows a remote attacker to read sensitive information from process memory via a crafted HTML page. The issue is rated as High severity.
- CVE-2026-14385High
A heap buffer overflow in ANGLE in Google Chrome on Mac prior to 150.0.7871.46 allows a remote attacker to perform out-of-bounds memory access via a crafted HTML page.
- CVE-2026-14384Medium
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome on Windows prior to version 150.0.7871.46 allows a remote attacker to leak cross-origin data via a crafted HTML page.
- CVE-2026-14125Medium
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to version 150.0.7871.47 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2026-13975Medium
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome on Mac allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2026-13877Medium
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
- CVE-2026-13834High
Insufficient validation of untrusted input in the ANGLE component in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The vulnerability has a Chromium security severity of High.
- CVE-2026-13833Medium
An uninitialized use vulnerability in the ANGLE component of Google Chrome on Mac prior to version 150.0.7871.47 allows a remote attacker to leak cross-origin data via a crafted HTML page.
- CVE-2026-13819High
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome on Mac prior to version 150.0.7871.47 allows a remote attacker who compromised the renderer process to read out-of-bounds memory via a crafted HTML page. The issue has a high Chromium security severity.
- CVE-2026-9999High
Inappropriate implementation in ANGLE in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- CVE-2026-9982High
Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-9975High
A vulnerability in the ANGLE component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is due to an out-of-bounds read and write.
- CVE-2026-9969High
A vulnerability in the ANGLE component of Google Chrome prior to version 148.0.7778.216 is caused by insufficient validation of untrusted input. A remote attacker can exploit a crafted HTML page to execute arbitrary code.
- CVE-2026-9965High
A vulnerability in the ANGLE component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue is an out-of-bounds write.
- CVE-2026-9953Medium
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to read sensitive information from process memory via a crafted HTML page. The issue has a high severity rating.
- CVE-2026-9946High
A Use-After-Free vulnerability in the ANGLE component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-9944Low
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
- CVE-2026-9942Medium
An uninitialized use vulnerability in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
- CVE-2026-9941High
A Use-After-Free vulnerability in the ANGLE component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
- CVE-2026-9940High
A heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
- CVE-2026-9935Medium
An uninitialized use vulnerability in the ANGLE component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
- CVE-2026-9932High
A use-after-free vulnerability in the ANGLE component in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-9928High
An out-of-bounds read vulnerability in the ANGLE component of Google Chrome on Windows prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page.
- CVE-2026-9927High
A use-after-free vulnerability in the ANGLE component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue is rated as high severity.
- CVE-2026-9926High
A heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-9925High
A Use-After-Free vulnerability in the ANGLE component in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-9924High
A heap buffer overflow in ANGLE in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
- CVE-2026-9916High
An out-of-bounds write vulnerability in the ANGLE component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

