EUVD-2026-74528
GHSA-9g2j-6gc9-33p2
Severity by source
AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N
Renderer-compromise prerequisite justifies AC:H; sandbox-boundary memory read justifies S:C/C:H; no write or availability impact means I:N/A:N.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
6DescriptionNVD
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
AnalysisAI
Out-of-bounds memory read in the WebView component of Google Chrome on Android allows an attacker who has already compromised the renderer process to escape the sandbox and read arbitrary memory via a crafted HTML page. The vulnerability is fixed in Chrome 153.0.8010.36; all prior Android Chrome versions are affected. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two conditions to be satisfied simultaneously: (1) the attacker must have already compromised the Chrome renderer process via a separate, unrelated vulnerability - this is a significant prerequisite that substantially raises the exploitation bar; and (2) the target must be running Google Chrome on Android (not desktop Chrome), specifically a version prior to 153.0.8010.36. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 6.1 score with vector AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N accurately reflects this vulnerability's two-stage nature: AC:H captures the non-trivial prerequisite of a already-compromised renderer, while S:C/C:H captures the meaningful sandbox-escape confidentiality impact once that bar is cleared. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update Google Chrome for Android to version 153.0.8010.36 or later; this is the vendor-released patch confirmed in the Chrome stable channel release notes at https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today