High severity8.3NVD Advisory· Published Sep 29, 2026· Updated Sep 29, 2026
CVE-2026-95322
CVE-2026-95322
Description
Out of bounds write in GPU in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
2- ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More ThreatsThe Hacker News · Sep 28, 2026
- Chrome Patches 108 Vulnerabilities Including Crticial Flaws that Enable Code Execution AttacksCyber Security News · Sep 23, 2026