Upstream information
Description
Out of bounds read in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)SUSE information
Overall state of this security issue: Revisit
This issue is currently rated as having critical severity.
| CVSS detail | CNA (CISA-ADP) | National Vulnerability Database |
|---|---|---|
| Base Score | 6.1 | 6.1 |
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N |
| Attack Vector | Network | Network |
| Attack Complexity | High | High |
| Privileges Required | None | None |
| User Interaction | Required | Required |
| Scope | Changed | Changed |
| Confidentiality Impact | High | High |
| Integrity Impact | None | None |
| Availability Impact | None | None |
| CVSSv3 Version | 3.1 | 3.1 |
SUSE Timeline for this CVE
CVE page created: Wed Sep 9 12:58:07 2026CVE page last modified: Thu Sep 10 21:55:38 2026