PT-2026-44601 · Google · Skia+1
CVE-2026-9892
·
Published
2026-05-28
·
Updated
2026-08-31
CVSS v3.1
8.3
High
| Vector | AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Google Chrome on Android versions prior to 148.0.7778.216
Description
An inappropriate implementation in Skia allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape by using a crafted HTML page. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the underlying system.
Recommendations
Update to version 148.0.7778.216 or later.
Fix
DoS
Improper Privilege Management
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Chrome On Android
Skia