Description
Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
Published: 2026-06-30
Score: 8.1 High
EPSS: < 1% Very Low
KEV: No
Impact: Remote memory disclosure via compromised renderer process
Action: Patch
AI Analysis

Impact

An out‑of‑bounds read occurs in the ANGLE graphics subsystem of Google Chrome on macOS. When an attacker compromises the renderer process, a crafted HTML page can read sensitive data from the renderer’s address space. The flaw is identified as CWE‑125.

Affected Systems

Google Chrome for macOS versions earlier than 150.0.7871.47, which employ the ANGLE subsystem. The patch 150.0.7871.47 and newer resolves the issue.

Risk and Exploitability

The CVSS score of 8.1 classifies the vulnerability as high severity. Exploitation requires prior compromise of the renderer process; once achieved, the out‑of‑bounds read can leak memory content. The EPSS score of less than 1% and absence from the CISA KEV catalog suggest limited current exploitation, but the consequence of successful exploitation remains significant.

Generated by OpenCVE AI on August 3, 2026 at 06:49 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Chrome to version 150.0.7871.47 or newer.
  • Maintain the default renderer sandbox settings; avoid disabling sandboxing through policy or command‑line options.
  • Minimize exposure to untrusted or malicious HTML content by restricting or sanitizing web pages fed to the browser.

Generated by OpenCVE AI on August 3, 2026 at 06:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4672-1 chromium security update
Debian DSA Debian DSA DSA-6378-1 chromium security update
History

Mon, 03 Aug 2026 07:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Memory Read in ANGLE Subsystem of Chrome on macOS

Tue, 28 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Memory Read in ANGLE Subsystem of Chrome on macOS

Wed, 22 Jul 2026 16:15:00 +0000

Type Values Removed Values Added
Title ANGLE Out‑of‑Bounds Read in Google Chrome on macOS

Fri, 17 Jul 2026 15:15:00 +0000

Type Values Removed Values Added
Title ANGLE Out‑of‑Bounds Read in Google Chrome on macOS

Wed, 15 Jul 2026 11:30:00 +0000

Type Values Removed Values Added
Title ANGLE Sub‑Bounds Read Vulnerability in Chrome on macOS

Mon, 13 Jul 2026 16:45:00 +0000

Type Values Removed Values Added
Title ANGLE Sub‑Bounds Read Vulnerability in Chrome on macOS

Sun, 12 Jul 2026 11:15:00 +0000

Type Values Removed Values Added
Title Chrome ANGLE Subsystem Out‑of‑Bounds Read on macOS

Sat, 11 Jul 2026 09:30:00 +0000

Type Values Removed Values Added
Title Chrome ANGLE Subsystem Out‑of‑Bounds Read on macOS

Fri, 10 Jul 2026 04:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Read in Chrome ANGLE on macOS Exposes Renderer Memory

Thu, 09 Jul 2026 08:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Read in Chrome ANGLE on macOS Exposes Renderer Memory

Wed, 08 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Read in ANGLE Leading to Remote Memory Disclosure via Compromised Renderer Process in Chrome for macOS

Tue, 07 Jul 2026 22:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Read in ANGLE Leading to Remote Memory Disclosure via Compromised Renderer Process in Chrome for macOS

Mon, 06 Jul 2026 21:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Read in ANGLE Leading to Memory Disclosure via Compromised Renderer Process on macOS

Mon, 06 Jul 2026 08:15:00 +0000

Type Values Removed Values Added
Title Out‑of‑Bounds Read in ANGLE Leading to Memory Disclosure via Compromised Renderer Process on macOS

Sun, 05 Jul 2026 20:00:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read in ANGLE on macOS Chrome Renderer

Sun, 05 Jul 2026 07:45:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read in ANGLE on macOS Chrome Renderer

Sat, 04 Jul 2026 20:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Memory Read in Chrome's ANGLE Graphics Driver on macOS

Sat, 04 Jul 2026 08:15:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Memory Read in Chrome's ANGLE Graphics Driver on macOS

Sat, 04 Jul 2026 00:30:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Memory Read in Chrome ANGLE on macOS

Fri, 03 Jul 2026 06:00:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Memory Read in Chrome ANGLE on macOS

Thu, 02 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Title Out-of-bounds memory read in Chrome's ANGLE renderer on macOS

Thu, 02 Jul 2026 07:15:00 +0000

Type Values Removed Values Added
Title Out-of-bounds memory read in Chrome's ANGLE renderer on macOS

Thu, 02 Jul 2026 00:45:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read in ANGLE on macOS Leading to Remote Memory Disclosure

Wed, 01 Jul 2026 16:45:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Read in ANGLE on macOS Leading to Remote Memory Disclosure

Wed, 01 Jul 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 01 Jul 2026 11:30:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Wed, 01 Jul 2026 11:00:00 +0000

Type Values Removed Values Added
Title Chromium ANGLE Out‑of‑Bounds Read Enabling Remote Memory Disclosure on macOS

Wed, 01 Jul 2026 01:00:00 +0000

Type Values Removed Values Added
Title Chromium ANGLE Out‑of‑Bounds Read Enabling Remote Memory Disclosure on macOS

Tue, 30 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Out of bounds read in ANGLE in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-125
References

Subscriptions

Apple Macos
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-01T19:12:31.549Z

Reserved: 2026-06-29T23:03:25.461Z

Link: CVE-2026-13819

cve-icon Vulnrichment

Updated: 2026-07-01T15:09:47.445Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-30T23:16:56.580

Modified: 2026-10-25T17:10:00.197

Link: CVE-2026-13819

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T07:00:05Z

Weaknesses