CVE-2026-9872Patch(google / android)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch google android systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Out of bounds write in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • android
  • chrome

Threat summary

  • Patch or workaround signal is available
  • 6 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 3 signals
  • Technical details provided in 3 signals
  • General: 2 classified signals
  • Disclosure: 1 classified signal
  • Peaked 3d ago at 2 mentions (2026-05-29); latest day: 1
  • 6 total mentions across 4 days

Affected systems

Vendors
Products
androidchrome

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 4d
01122Mentions · 2026-05-29: 2Mentions · 2026-05-31: 2Mentions · 2026-06-02: 1Mentions · 2026-06-17: 1Patch / Workaround · 2026-05-29: 1Patch / Workaround · 2026-05-31: 2Technical Details · 2026-05-29: 1Technical Details · 2026-05-31: 1Technical Details · 2026-06-02: 105-2905-3106-0206-17
Signal classification3 categories
Patch
350.0%
General
233.3%
Disclosure
116.7%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-05-292
Disclosure1Patch1
2026-05-312
Patch2
2026-06-021
General1
2026-06-171
General1
Full discourse6 posts
  • セキュリティ対策Lab@securityLab_jp
    Patch

    Google、Chromeをアップデート、151件の脆弱性を修正-CVE-2026-9872(GPU),CVE-2026-9873(Network) https://rocket-boys.co.jp/security-measures-lab/chrome-vulnerabilities-patched-cve-2026-9872-9873/ #セキュリティ対策Lab #security #securitynews

    Post summary

    Google released a Chrome update patching 151 vulnerabilities, including CVE‑2026‑9872 and CVE‑2026‑9873, with a reference to a blog post detailing the fix.

    00011168
    408 followersView on X
  • Cybersecurity News Everyday@TweetThreatNews
    Patch

    Chrome 148 patches 151 vulnerabilities, including 22 critical flaws that could enable RCE or sandbox escape. Top issues include CVE-2026-9872 in GPU and CVE-2026-9873 in Network. #Chrome148 #CVE2026 #BrowserSecurity https://ift.tt/i6UYXfo

    Post summary

    Chrome 148 releases patches for 151 vulnerabilities, highlighting 22 critical issues that could enable RCE or sandbox escape (e.g., CVE‑2026‑9872 in GPU, CVE‑2026‑9873 in Network). No PoC, exploit code, or active exploitation is reported—only patch details are provided.

    00010137
    4.3K followersView on X
  • IntegSec@integ_sec
    General

    CVE-2026-9872: Google Chrome GPU Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04lJmGg0

    Post summary

    The provided snippet only mentions the CVE identifier and article title, without explicit details on PoC, exploits, patches, or technical specifics.

    0000031
    31 followersView on X
  • Hi@hieyz6838
    General

    GPU sandbox escapes hitting $43k in 2026?? the browser attack surface is wild rn 👀 CVE-2026-9872 out-of-bounds write in GPU, CVE-2026-9873 use-after-free in Network. update immediately if you haven't yet #bugbounty #InfoSec

    Post summary

    The tweet briefly announces two 2026 CVEs with generic vulnerability types, but offers no evidence of active exploitation, patches, or explicit proof of concept.

    0000070
    13 followersView on X
  • Marcus Lenngren@lenngrenm
    Patch

    ⚠️ CRITICAL: Chrome 148 Update Patches 151 Vulnerabilities Google released Chrome 148 patching 151 vulnerabilities, including 22 critical-severity flaws that enable remote code execution and sandbox escape. CVE-2026-9872 and CVE-2026-9873 https://threatnoir.com/focus #cyberse

    Post summary

    Google released Chrome 148 to patch 151 vulnerabilities, including 22 critical flaws that allow remote code execution and sandbox escape (CVE-2026-9872, CVE-2026-9873); no PoC, exploit, or active exploitation claims are provided.

    0000074
    322 followersView on X
  • VulDB 🛡@vuldb
    Disclosure

    A severe vulnerability was disclosed for Google Chrome (CVE-2026-9872) https://vuldb.com/vuln/366953

    Post summary

    A severe vulnerability for Google Chrome (CVE-2026-9872) has been disclosed, but no further technical details, PoC, or mitigation information are provided.

    0000084
    2.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSgoogleandroid---
Appgooglechrome---

Explore more