CRITICALCVSS v3.1 9.6Vulnerability

CVE-2026-120931

Out of bounds write in WebGL in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Properties

Severity
CRITICAL
Nvd fetched at
2026-11-04T01:29:06.847378+00:00
Cvss score
9.6
Cvss severity
CRITICAL
Retrieved at
2026-11-04T01:30:00+00:00
Score
9.6
Last source
NVD
Cvss version
3.1
Cve id
CVE-2026-120931
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
First seen by Signal
2026-11-04T01:30:00+00:00
Name
CVE-2026-120931
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Published at
2026-11-03T22:19:31.900
Last modified
2026-11-03T22:19:32.063

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Out-of-bounds Write

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-120931 (CVSS v3.1 9.6) — Ninja Signal Threat Intelligence | Ninja Signal