Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2026-6920

Опубликовано: 23 апр. 2026
Источник: redhat
CVSS3: 9
EPSS Низкий

Описание

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

An out of bounds read flaw was found in the GPU component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=499891888

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Меры по смягчению последствий

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Дополнительная информация

Статус:

Important
Дефект:
CWE-125
https://bugzilla.redhat.com/show_bug.cgi?id=2461226Google Chrome: Chromium: chromium-browser: Out of bounds read in GPU

EPSS

Процентиль: 11%
0.00211
Низкий

9 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.6
ubuntu
3 месяца назад

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVSS3: 9.6
nvd
3 месяца назад

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

msrc
3 месяца назад

Chromium: CVE-2026-6920 Out of bounds read in GPU

CVSS3: 9.6
debian
3 месяца назад

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7 ...

CVSS3: 7.5
github
3 месяца назад

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

EPSS

Процентиль: 11%
0.00211
Низкий

9 Critical

CVSS3