CVE-2026-120931
CRITICAL
NVD
CVSS Score
9.6
Severity
CRITICAL
Published
Nov 03, 2026
Vendor
unknown
Description
Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)