CVE-2026-76036
Description
A flaw was found in Dawn in Google Chrome on Android. This buffer overflow vulnerability allows a remote attacker to execute arbitrary code outside of the sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page.
Statement
This Important flaw in Dawn, as used in Chromium-based browsers, allows a remote attacker to execute arbitrary code outside the browser's sandbox. This occurs when a user visits a specially crafted HTML page, leading to a buffer overflow. The impact is significant due to the potential for arbitrary code execution, even though user interaction is required.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
