[ CVE-2026-106247 · Published 6 Oct 2026 ]
Vulnerability in Google Chrome
CVSS 8.3
EPSS <1%3 agency advisoriesFix available
[ Description ]Official description
Buffer overflow in ANGLE in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
[ Fixes ]Fixes and patches
- Patch on issues.chromium.orgVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
CERT-FRCERTFR-2026-AVI-1342
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security problem not specified by the vendor.
-
CERT-FRCERTFR-2026-AVI-1268
Multiple vulnerabilities in Google Chrome Translated from French
Multiple vulnerabilities have been discovered in Google Chrome. They allow an attacker to cause a security problem not specified by the vendor.
-
BSI CERT-BundWID-SEC-2026-3761
Google Chrome / Microsoft Edge: Multiple vulnerabilities Translated from German
[ References ]References
- chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_086471744.htmlRelease NotesVendor Advisory
- issues.chromium.org/issues/524435922Patch