CVE-2026-95331

Summary

The flaw is an out-of-bounds write vulnerability in ANGLE in Google Chrome prior to 154.0.8037.57, which could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation is relatively straightforward given a crafted HTML page, and the attacker would need to convince a user to open the page.

Blast radius

If exploited, the attacker could potentially execute arbitrary code on the victim's machine, leading to full control over the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Google Chrome 154.0.8037.57 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.