CVE-2026-91738: Input Validation
Published Sep 15, 2026
·Updated
Improper input validation in ANGLE in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Affected Software
2 affected components
Google Google Chrome<153.0.8010.47
Google ANGLE
Event History
Sep 15, 2026
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
DescriptionWeakness
Frequently Asked Questions
1
Which Chrome versions need to be updated?
Google Chrome versions prior to 153.0.8010.47 are affected. Update to 153.0.8010.47 or a later version.
2
What does an attacker need to exploit this issue?
An attacker would need to induce a user to load a crafted HTML page remotely. Successful exploitation could potentially execute arbitrary code outside the browser sandbox.