CVE-2026-9967
Critical · 9.6CVSS
9.6
EPSS
0.2%
Published
May 28, 2026
CISA due date
—
The record
Out of bounds write in GPU in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 148.0.7778.215-1.1 |
Related vulnerabilities
- CVE-2026-14425 Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14427 Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote… Also affects chromium
- CVE-2026-14430 Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14431 Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to… Also affects chromium
- CVE-2026-14432 Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to… Also affects chromium
- CVE-2026-14426 Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14428 Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14429 Insufficient validation of untrusted input in Skia in Google Chrome prior to… Also affects chromium