CVE-2026-10886Patch(apple / chrome)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apple chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

1.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • linux_kernel
  • macos
  • windows

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Products
chromelinux_kernelmacoswindows

1 version affected across 4 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-05: 1Patch / Workaround · 2026-06-05: 1Technical Details · 2026-06-05: 106-05
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨Critical - Google Chrome ANGLE Sandbox Escape (CVE-2026-10881) Out-of-bounds read + write vulnerability in Chrome’s ANGLE graphics layer (WebGL / hardware acceleration) allows a remote attacker to craft a malicious HTML page that triggers a sandbox escape. Successful exploitation can lead to full system compromise. Affected versions: • Google Chrome (and Chromium-based browsers) < 149.0.7827.53 Impact: • Requires user interaction (visit malicious webpage) • Sandbox escape leading to potential full system compromise • Related to CVE-2026-10886 (Use-after-free in FileSystem) 👉Upgrade to Chrome 149.0.7827.53 .

    Post summary

    The post highlights a critical out‑of‑bounds read/write flaw in Chrome's ANGLE graphics layer (CVE‑2026‑10881) that can lead to sandbox escape via a malicious HTML page, and urges users to update to version 149.0.7827.53 to mitigate the risk.

    0000070
    207 followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---
OSlinuxlinux_kernel---
OSmicrosoftwindows---

Explore more