CVE details

CVE-2026-6296

Heap buffer overflow in ANGLE in Google Chrome prior to 147.

• Severity: Critical
• CVSS: 9.6
• Published: 2026-04-15
• Fixed in: 147.0.7727.101

Description

Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

Affected products

• Google Chrome · → 147.0.7727.101

Overlaps: Google Chrome

Source

View on NVD

Check if your browser is affected