CVE-2026-76036
CRITICAL 9.6EPSS 0.5%
Buffer overflow in Dawn in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
- Affected
- Google · Chrome
- CVSS v3.1 CNA
- 9.6 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - EPSS
- 0.51% chance of exploitation in the next 30 days, 42nd percentile
- Published
- 2026-08-18
- Updated
- 2026-08-20
Proof-of-concept exploits (1)
- Hunt-Benito/rendering-code-outside-the-sandbox-cve-2026-76036-dawn-webgpu-buffer-overflow…1★ · 2026-08-21