Missing authorization in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a co-installed app. (Chromium security severity: Medium)
Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-19137 Use after free in WebGL
Chromium: CVE-2026-17663 Insufficient validation of untrusted input in GPU
Chromium: CVE-2026-13037 Use after free in WebView
Use after free in Media in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Insufficient validation of untrusted input in WebAppInstalls in Google Chrome on Android prior to 148.0.7778.216 allowed a local attacker to execute arbitrary code via a malicious file. (Chromium security severity: High)
Chromium: CVE-2026-9892 Inappropriate implementation in Skia
Chromium: CVE-2026-9977 Insufficient validation of untrusted input in WebShare
Chromium: CVE-2026-12438 Inappropriate implementation in WebView
Chromium: CVE-2026-12448 Inappropriate implementation in WebView
Chromium: CVE-2026-12031 Inappropriate implementation Views
Chromium: CVE-2026-12028 Use after free GPU
Chromium: CVE-2026-12010 Heap buffer overflow GPU
Chromium: CVE-2026-11671 Use after free in Navigation
Use after free in Web MIDI in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Out of bounds memory access in WebGL in Google Chrome on Android prior to 146.0.7680.153 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)