Skip to main content

Google EUVDEUVD-2026-47574

| CVE-2026-16419 CRITICAL
Out-of-bounds Read (CWE-125)
2026-07-21 chrome-cve-admin@google.com GHSA-c883-9873-x34j
9.6
CVSS 3.1 · Vendor: google
Share

Severity by source

Vendor (google) PRIMARY
9.6 CRITICAL
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
SUSE
CRITICAL
qualitative

Primary rating from Vendor (google).

CVSS VectorVendor: google

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Generated
Jul 26, 2026 - 12:00 vuln.today
CVSS changed
Jul 24, 2026 - 13:22 NVD
9.6 (CRITICAL)
CVE Published
Jul 21, 2026 - 23:16 cve.org
CRITICAL 9.6
CVE Published
Jul 21, 2026 - 23:16 cve.org
UNKNOWN (no severity yet)

DescriptionCVE.org

Out of bounds read and write in ANGLE in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

An out-of-bounds read and write in ANGLE within Google Chrome on Android allows a remote attacker to potentially escape the browser sandbox via a crafted HTML page. The flaw is patched in Chrome 150.0.7871.182. No public exploit or active exploitation has been reported; EPSS estimates a low 0.16% probability of exploitation.

Vendor StatusVendor

SUSE

Severity: Critical
Product Status
SUSE Package Hub 15 SP7 Fixed
openSUSE Leap 16.0 Fixed
openSUSE Tumbleweed Fixed
SUSE Package Hub 15 SP7 Affected

Share

EUVD-2026-47574 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy