CVE-2026-91726: Google Chrome for Android vulnerability
Published Sep 15, 2026
·Updated
Out of bounds read in WebGL in Google Chrome on on Android prior to 153.0.8010.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected Software
1 affected component
Google Chrome for Android<153.0.8010.47
Event History
Sep 15, 2026
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
DescriptionWeakness
Frequently Asked Questions
1
Which Chrome for Android versions need to be updated?
Google Chrome for Android versions prior to 153.0.8010.47 are affected. Update to 153.0.8010.47 or later.
2
What interaction is required for exploitation?
A remote attacker would need a user to load a crafted HTML page in Chrome for Android. The provided information does not state any additional prerequisites or configuration changes.
3
What is the potential impact of successful exploitation?
Successful exploitation can allow an attacker to read memory outside the sandbox through an out-of-bounds read in WebGL.