NVD security advisoryCritical
Critical advisory for Out of bounds write in WebGL in Google C
CVE-2026-120931 · Reported 3 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Out of bounds write in WebGL in Google CAffected product
Advisory overview
Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
