CVE-2026-121246

Summary

A use-after-free vulnerability in Chrome's WebGL implementation on Android allowed remote attackers to execute arbitrary code outside the sandbox by tricking a user into visiting a malicious page.

Exploitability

Exploitation requires user interaction (e.g., clicking a link) and a specially crafted HTML page targeting a vulnerable Chrome version on Android; no public exploit is known.

Blast radius

Successful exploitation could lead to full system compromise outside the browser sandbox, enabling data theft, malware installation, or lateral movement.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome on Android to version 157.0.8103.38 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.