REDHAT-BUG-2482975: Medium severity Google Chrome for Android vulnerability

Q: Who is exposed to this issue?

The affected product is Google Chrome for Android before version 148.0.7778.216. Exploitation also requires that the Chrome renderer process has already been compromised.

Q: What would an attacker need to do to exploit it?

An attacker would need a prior renderer-process compromise and would use a crafted HTML page to potentially escape the sandbox.

Q: How can I remediate the issue?

Update Google Chrome for Android to version 148.0.7778.216 or later.

Published May 28, 2026

Updated

Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

Affected Software

1 affected component

Google Chrome for Android<148.0.7778.216

Event History

May 28, 2026

Data Sourced

via Red Hat·11:01 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is exposed to this issue?

The affected product is Google Chrome for Android before version 148.0.7778.216. Exploitation also requires that the Chrome renderer process has already been compromised.

What would an attacker need to do to exploit it?

An attacker would need a prior renderer-process compromise and would use a crafted HTML page to potentially escape the sandbox.

How can I remediate the issue?

Update Google Chrome for Android to version 148.0.7778.216 or later.

REDHAT-BUG-2482975: Medium severity Google Chrome for Android vulnerability

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

What would an attacker need to do to exploit it?

How can I remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

What would an attacker need to do to exploit it?

How can I remediate the issue?