CVE-2026-95329

Summary

This flaw involves an out-of-bounds write in WebGL in Google Chrome on Android, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation is considered critical and requires a remote attacker to deliver a crafted HTML page to a victim, making it highly exploitable under certain conditions.

Blast radius

If exploited, the impact could be severe, as it allows execution of arbitrary code outside the sandbox, potentially leading to full system compromise.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Chrome version 154.0.8037.57 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.