CVE-2026-76036

Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

CVSS v3.1

9.6 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS

0.81% chance of exploitation in the next 30 days, 54th percentile

Published

2026-08-18

Updated

2026-08-20

Proof-of-concept exploits (1)

• Hunt-Benito/rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow…1★ · 2026-08-21

References

• CVE Record
• NVD entry

Related

• CVE-2025-54328
• CVE-2026-10672
• CVE-2026-11450
• CVE-2026-11451
• CVE-2026-11452
• CVE-2026-12045