Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-76046: Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who

36
Routine
HIGH 8.3UPGRADE

CVE-2026-76046 is a high-severity flaw (CVSS 8.3) affecting chrome. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Why this priority

  • High severity

A fixed release or distro patch exists.

Risk facts

CVSS score8.3 (High)
Attack vectorNetwork (remote)
Attack complexityHigh
Privileges neededNone
User interactionRequired
EPSS exploit chance0.4% (top 71%)
CISA exploited listNo
WeaknessCWE-122
Published2026-08-18
Last modified2026-10-22
Publisher (CNA): Chrome · Vendor: google

Am I affected?

Timeline

google chrome UPGRADE
Affected: < 151.0.7922.169
Fixed in: 151.0.7922.169
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy chrome || rpm -q chrome || chrome --version
2. UPGRADE to 151.0.7922.169 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade chrome
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade chrome
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.

Exact fixes by distribution

Fedora 46 · wasmedge · FIXED · 0.18.1-1.fc46 · FEDORA-2026-4c27216e39 · source
sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39
Ubuntu 22.04 · chromium-browser · NOT AFFECTED
Ubuntu 24.04 · chromium-browser · NOT AFFECTED
Debian 12 · chromium · FIXED · 151.0.7922.169-1~deb12u1
sudo apt update && sudo apt install --only-upgrade chromium dpkg --compare-versions "$(dpkg-query -W -f='${Version}' chromium)" ge "151.0.7922.169-1~deb12u1" && echo PATCHED || echo STILL-VULNERABLE
Debian 13 · chromium · FIXED · 151.0.7922.169-1~deb13u1
sudo apt update && sudo apt install --only-upgrade chromium dpkg --compare-versions "$(dpkg-query -W -f='${Version}' chromium)" ge "151.0.7922.169-1~deb13u1" && echo PATCHED || echo STILL-VULNERABLE
RHEL 8 · webkit2gtk3 · FIXED · webkit2gtk3-2.54.0-1.el8_10
sudo dnf upgrade --advisory=RHSA-2026:74084 rpm -q webkit2gtk3
RHEL 9 · webkit2gtk3 · FIXED · webkit2gtk3-2.54.0-1.el9_8
sudo dnf upgrade --advisory=RHSA-2026:69098 rpm -q webkit2gtk3
RHEL 10 · firefox · NOT AFFECTED
RHEL 10 · thunderbird · NOT AFFECTED
RHEL 6 · webkitgtk · DEFERRED

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2026-76046?

chrome: upgrade to 151.0.7922.169. Exact commands for each OS are on this page.

Is CVE-2026-76046 being exploited?

CVE-2026-76046 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2026-76046 affect?

CVE-2026-76046 affects chrome. Severity is high (CVSS 8.3). Buffer overflow in ANGLE in Google Chrome on on Android prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security sev

How urgent is CVE-2026-76046?

Priority 36/100. High severity

Related CVEs

References

← Back to latest CVEs