PatchSiren cyber security CVE debrief
CVE-2026-12010 Google CVE debrief
CVE-2026-12010 is a critical vulnerability in Google Chrome on Android, specifically a heap buffer overflow in the GPU. This vulnerability, published on [cvePublishedAt], was exploited via a crafted HTML page, potentially allowing a remote attacker who had compromised the renderer process to perform a sandbox escape.
- Vendor
- Product
- Chrome
- CVSS
- HIGH 8.3
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-11
- Original CVE updated
- 2026-06-12
- Advisory published
- 2026-06-11
- Advisory updated
- 2026-06-12
Who should care
Users of Google Chrome on Android, particularly those with versions prior to 149.0.7827.115, should update their browser to mitigate this vulnerability.
Technical summary
The vulnerability is a heap buffer overflow in the GPU of Google Chrome on Android. It was rated as Critical by the Chromium security team and has a CVSS score of 8.3, indicating high severity. The vulnerability was exploited through a crafted HTML page, which could allow a remote attacker to potentially escape the sandbox.
Defensive priority
High
Recommended defensive actions
- Update Google Chrome to version 149.0.7827.115 or later.
Evidence notes
Evidence from the NVD and Chromium security team indicates that this is a critical vulnerability that could lead to sandbox escape.
Official resources
-
CVE-2026-12010 CVE record
CVE.org
-
CVE-2026-12010 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
-
Source reference
[email protected] - Issue Tracking, Permissions Required
CVE-2026-12010 was published on [cvePublishedAt] and modified on [cveModifiedAt].