CVE-2026-102307

Vendor

Google

Product

chrome, android, chromium

CVSS

4.7

EPSS

0.002 (p12)

Exposure class

Browser, Mobile OS

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 20
   CVE NVD 29 Sep 2026

   Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via…

   Uninitialized resource in Dawn in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

   CVSS 4.7 CVE-2026-102307 Google
2. 19
   Chrome release Chrome Releases 29 Sep 2026

   Stable Channel Update for Desktop

   The Stable channel has been updated to 154.0.8037.92/.93 for Windows and Mac and 154.0.8037.92 to Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log Security Fixes…

   CVE-2026-102331CVE-2026-102317CVE-2026-102312+29 more Google