EUVD-2026-61223
GHSA-mp6m-3892-rmhh
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
S:C replaces S:U because code execution explicitly occurs outside the Chrome sandbox, affecting the broader OS security scope beyond the vulnerable renderer component.
Primary rating from Vendor (google).
CVSS VectorVendor: google
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Buffer overflow in WebGL in Google Chrome prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
AnalysisAI
Heap-based buffer overflow in Google Chrome's WebGL implementation (all versions prior to 151.0.7922.169) enables a remote attacker to execute arbitrary code outside the browser sandbox by luring a user to a crafted HTML page. The sandbox escape elevates the impact from renderer-level code execution to potential full OS-level compromise. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to open a crafted HTML page in an unpatched version of Chrome (prior to 151.0.7922.169) - this is the sole prerequisite, as CVSS PR:N confirms no authentication is needed and WebGL is enabled by default in all standard Chrome installations. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 8.8 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) reflects a high-severity, network-reachable flaw requiring only a single user interaction - visiting a webpage - with no authentication and low attack complexity. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker crafts an HTML page containing malicious WebGL shader code or draw calls that trigger the heap buffer overflow in Chrome's WebGL implementation. A victim is directed to this page via a phishing link or malicious advertisement; upon rendering, the overflow corrupts heap metadata, enabling the attacker to achieve code execution within the renderer process and subsequently escape the Chrome sandbox to run arbitrary code at the OS user level. … |
| Remediation | Update Google Chrome to version 151.0.7922.169 or later immediately; this is the vendor-confirmed patched release per the stable-channel advisory at https://chromereleases.googleblog.com/2026/08/stable-channel-update-for-desktop_0826575033.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, test Chrome 151.0.7922.169 or later in a controlled environment to validate compatibility with enterprise applications and policies. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-122 – Heap-based Buffer Overflow
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today