CVE-2026-106247

Summary

A buffer overflow vulnerability in ANGLE (Almost Native Graphics Layer Engine) within Google Chrome allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process. This represents a critical escalation path from renderer compromise to system-level code execution.

Exploitability

Exploitation requires an attacker to first compromise the renderer process, then craft a malicious HTML page that triggers the buffer overflow, making it moderately difficult but achievable with a chained attack approach.

Blast radius

If exploited, this vulnerability could allow attackers to execute arbitrary code on the victim's system with full privileges, potentially leading to complete system compromise and data exfiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 155.0.8059.39 or later to remediate this buffer overflow vulnerability in ANGLE.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.