CVE-2026-103628

NONE
Updated Oct 02, 2026
Google
Parameter Value
Affected Versions before 154.0.8037.97
Type CWE-787 (Out-of-bounds Write)
Vendor Google
Public PoC No

Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Weakness Type (CWE)