Description
Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-06-24
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free flaw (CWE‑416) in the WebGL implementation of Google Chrome on Android allows a malicious HTML page to trigger memory corruption (CWE‑825). This can enable a remote attacker to escape the browser sandbox and execute code outside of Chrome’s confines, potentially escalating to full device compromise.

Affected Systems

Android devices running Google Chrome on the stable channel with a version earlier than 149.0.7827.197 are affected. The issue exists in all stable releases prior to the patch. No other platforms or channels were mentioned.

Risk and Exploitability

The CVSS score of 9.6 classifies the vulnerability as critical, while the EPSS score of less than 1 % suggests a low current exploitation likelihood. The flaw is not listed in the CISA KEV catalog. Based on the description, the attack vector is a crafted HTML page that a user opens in Chrome; no additional credentials or network access are required. If successfully exploited, the attacker could escape the sandbox and potentially gain elevated privileges on the device.

Generated by OpenCVE AI on June 29, 2026 at 14:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Google Chrome on all Android devices to version 149.0.7827.197 or later.
  • Distribute the update centrally via device management or enterprise policy to ensure timely installation.
  • If an immediate update is not possible, block or disable WebGL through Chrome flags (chrome://flags) or enforce a policy setting to limit WebGL usage until the patch is applied.

Generated by OpenCVE AI on June 29, 2026 at 14:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4654-1 chromium security update
Debian DSA Debian DSA DSA-6364-1 chromium security update
History

Mon, 29 Jun 2026 12:15:00 +0000

Type Values Removed Values Added
Title Use-After-Free in WebGL on Android Chrome Enables Sandbox Escape chromium-browser: chromium-browser: Use after free in WebGL
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Critical

Thu, 25 Jun 2026 07:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 24 Jun 2026 21:45:00 +0000

Type Values Removed Values Added
Title Use-After-Free in WebGL on Android Chrome Enables Sandbox Escape

Wed, 24 Jun 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 24 Jun 2026 19:15:00 +0000

Type Values Removed Values Added
Description Use after free in WebGL in Google Chrome on Android prior to 149.0.7827.197 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-25T03:55:35.914Z

Reserved: 2026-06-23T17:14:11.455Z

Link: CVE-2026-13032

cve-icon Vulnrichment

Updated: 2026-06-24T19:24:27.885Z

cve-icon NVD

No data.

cve-icon Redhat

Severity : Critical

Publid Date: 2026-06-24T18:43:13Z

Links: CVE-2026-13032 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-06-29T14:30:18Z

Weaknesses