CVE Watchtower


← Back to CVE List

CVE-2026-9975NVD

Vulnerability Summary

Out of bounds read and write in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Severity Level
HIGH(8.3)
Published Date
May 28, 2026
Last Modified
Jun 1, 2026
Exploitation Status
UNKNOWN
Root Weakness (CWE)
The software reads data past the end, or before the beginning, of the intended buffer.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredNone
User InteractionRequired
ScopeChanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh