CVE-2026-93372: Buffer Overflow
Published Sep 17, 2026
·Updated
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected Software
1 affected component
Google Chrome for Android<153.0.8010.52
Event History
Sep 17, 2026
CVE Published
via MITRE·09:08 PM
Data Sourced
via MITRE·09:08 PM
DescriptionWeakness
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The attacker needs to get a user of an affected Chrome for Android version to load a crafted HTML page remotely.
2
Which devices are affected?
Google Chrome for Android versions earlier than 153.0.8010.52 are affected. The provided information does not identify other Chrome platforms as affected.
3
What is the impact if exploitation succeeds?
A remote attacker could execute arbitrary code outside the Chrome sandbox.