Critical severity9.6NVD Advisory· Published Jun 4, 2026· Updated Jun 5, 2026
CVE-2026-10881
CVE-2026-10881
Description
Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)
Affected products
4Patches
Vulnerability mechanics
References
2- chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.htmlnvdRelease NotesVendor Advisory
- issues.chromium.org/issues/498904293nvdPermissions Required
News mentions
4- ⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and MoreThe Hacker News · Jun 8, 2026
- AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 BugsThe Hacker News · Jun 6, 2026
- Chrome 149 Patches 429 VulnerabilitiesSecurityWeek · Jun 5, 2026
- Google ANGLE: Two Critical Sandbox Escapes and Data Leak Flaws DisclosedVypr Intelligence · Jun 4, 2026