EUVD-2026-41181
GHSA-v42f-jwg7-7q69
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Remote crafted page needs a victim visit (AV:N/UI:R, PR:N); crossing the sandbox boundary gives S:C; an out-of-bounds read is primarily a disclosure primitive (C:H) with only speculative integrity/availability impact (I:L/A:L).
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Out of bounds read in Dawn in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
AnalysisAI
Out-of-bounds read in the Dawn WebGPU implementation of Google Chrome before 150.0.7871.46 lets a remote attacker who lures a victim to a crafted HTML page potentially escape the renderer sandbox and disclose out-of-bounds memory. The upstream Chromium team rated the security severity as Low, yet the associated CVSS 3.1 base score is 9.6 due to a scope change and high triad impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to actively visit or render an attacker-controlled HTML page (CVSS UI:R - user interaction is required), and the crafted page must exercise the WebGPU/Dawn code path, so WebGPU support must be available and reachable in the target browser. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals conflict and should be weighed carefully. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a malicious web page containing crafted WebGPU/JavaScript that drives Dawn into reading out-of-bounds memory, then tricks a victim into visiting it via a phishing link or malvertising. The leaked memory could aid a broader exploit chain aimed at escaping the renderer sandbox. … |
| Remediation | Update to Google Chrome 150.0.7871.46 or later on the Stable channel, which contains the vendor-released fix (Vendor-released patch: 150.0.7871.46); most installations receive this automatically, so verify via chrome://settings/help and relaunch to apply the update. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Inventory all Chrome deployments (desktop, mobile, managed endpoints) and identify update mechanisms (auto-update status, MDM controls, manual deployment). …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today