EUVD-2026-50847
GHSA-m2x7-p454-5w3c
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Remote crafted page needs no auth (AV:N/PR:N) but requires the user to load it (UI:R); the sandbox escape crosses a trust boundary (S:C) with full CIA impact.
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
5DescriptionCVE.org
Out of bounds write in ANGLE in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
AnalysisAI
Sandbox escape in Google Chrome's ANGLE graphics component affects all Desktop builds prior to 151.0.7922.72, where an out-of-bounds write (CWE-787) can be triggered by a crafted HTML page to corrupt memory in the GPU process and cross the sandbox boundary. Chromium rates the flaw High and the CVSS 3.1 score is 9.6 owing to the scope change (S:C) and full CIA impact, though it requires the victim to load attacker-controlled content (UI:R). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the victim to load attacker-controlled HTML/graphics content in a vulnerable Chrome build (<151.0.7922.72) with GPU acceleration active so that the ANGLE code path processes the crafted data - this matches CVSS UI:R (user interaction required). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are partially conflicting and warrant nuance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker hosts a malicious web page containing crafted WebGL/graphics content and lures a victim to visit it (via phishing link, malvertising, or a compromised site). When the page renders, the ANGLE out-of-bounds write corrupts GPU-process memory, and - typically chained with a renderer bug - the attacker escapes the Chrome sandbox to run code with the GPU process's privileges. … |
| Remediation | Vendor-released patch: update Google Chrome to 151.0.7922.72 or later via the Stable channel (verify through chrome://settings/help, which triggers the background updater, then relaunch the browser to apply it); managed fleets should push the update through their enterprise update policy or MDM. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify all Chrome desktop deployments and verify patch status for version 151.0.7922.72 or later; communicate the critical nature of this vulnerability to leadership and affected users. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-787 – Out-of-bounds Write
View allSame technique Buffer Overflow
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Package Hub 15 SP7 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| SUSE Package Hub 15 SP7 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today