Skip to content
NewA calmer, faster ZeroHour
Vulnerability1 · 1 read

CVE-2026-121247

Buffer overflow in Dawn Google Chrome on Android prior to 157.0.8103.38

CVSS 3.1
9.6 critical
EPSS
—
Published
·
Modified
Analyze CVE-2026-121247 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

A buffer overflow in Dawn within Google Chrome for Android permits remote attackers to execute arbitrary code by crafting an HTML page. This affects Chrome versions prior to 157.0.8103.38. Attackers gain code execution outside the sandbox on impacted Android devices.

What to do: Upgrade Google Chrome to version 157.0.8103.38 or later on Android.

ProductAffectedFixed in
Google Chromeprior to 157.0.8103.38157.0.8103.38
Estimated exposure
No basis for an estimate.

Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.

Description · NVD

Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Vendors
google
Products
chrome
Weakness
CWE-122
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

In the news

2 stories