{"id":"CVE-2026-110152","published":"2026-10-13T22:17:35.077","lastModified":"2026-10-15T04:18:19.277","description":"Buffer overflow in ANGLE in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-122"],"vendors":["google"],"products":["chrome","android"],"references":[{"url":"https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_01668083673.html","tags":["Release Notes","Vendor Advisory"]},{"url":"https://issues.chromium.org/issues/567736859","tags":["Permissions Required"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A buffer overflow vulnerability in ANGLE (Almost Native Graphics Layer Engine) library allows remote attackers to execute arbitrary code outside Chrome's sandbox on Android devices. This critical flaw enables attackers to potentially take full control of affected systems through crafted HTML pages.","exploitability":"Exploitation requires a user to visit a malicious webpage, making it moderately difficult but highly possible in phishing scenarios or compromised websites, with no additional preconditions needed.","blast_radius":"The vulnerability affects all Android users running Chrome versions prior to 155.0.8059.79, potentially exposing millions of devices to remote code execution attacks through web browsing.","remediation":"Upgrade to Chrome for Android version 155.0.8059.79 or later immediately.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","browser","android","angle"],"model":"garnet-coder","analyzedAt":"2026-10-15T08:54:24.911Z"}}