Patch Forecast
Amber warning
Patch this week.

CVE-2026-95350

Chrome: heap buffer overflow can lead to remote code execution

Risk score
76/100
CVSS
9.6 v3.1
Exploit chance (30 days)
0.5%
Published
29 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected
Chrome before 154.0.8037.57
Fix
Upgrade Chrome to 154.0.8037.57 or later.
Exploitation
Public proof of concept

Story map

Story map: ChromeTHE FLAWSTHE FIXCVE-2026-95350Heap buffer overflow can leadto remote code executionCVSS 9.6 · EPSS 1%CVE-2026-106329Incorrect authorisation canlead to remote code executionCVSS 9.6 · EPSS 0%CVE-2026-106417Integer overflow can lead toremote code executionCVSS 9.6 · EPSS 0%CVE-2026-110136Use-after-free can lead toremote code executionCVSS 9.6 · EPSS 0%Upgrade Chrome154.0.8037.57 · 155.0.8059.39· 155.0.8059.79or later on your release lineWho is exposedChrome before 154.0.8037.57AMBER · PATCH THIS WEEKChromeBuffer overflow in ANGLE inGoogle Chrome on on Androidprior to 154.0.8037.57 allowed aremote attacker to executearbitrary code outside thesandbox via a crafted HTMLpage. (Chromium security…Where it standsPublic proof of conceptHOW IT UNFOLDEDOfficial record on the left, the press on the right, oldest first.16 Oct · Microsoft Security Response CenterChromium CVE-2026-106329: Incorrectauthorization16 Oct · Microsoft Security Response CenterChromium CVE-2026-106417: Integer overflow16 Oct · Microsoft Security Response CenterChromium CVE-2026-110136: Use after freeCONNECTS TOSame weaknessHeap buffer overflow (CWE-122)399 other warnings in 30 days →Same productEarlier Chrome warnings396 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Chrome: Amber, patch this week. Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

The flaws

  • CVE-2026-95350: Heap buffer overflow can lead to remote code execution (CVSS 9.6 · EPSS 1%)
  • CVE-2026-106329: Incorrect authorisation can lead to remote code execution (CVSS 9.6 · EPSS 0%)
  • CVE-2026-106417: Integer overflow can lead to remote code execution (CVSS 9.6 · EPSS 0%)
  • CVE-2026-110136: Use-after-free can lead to remote code execution (CVSS 9.6 · EPSS 0%)

The fix

Upgrade Chrome: 154.0.8037.57 · 155.0.8059.39 · 155.0.8059.79 or later on your release line

Who is exposed: Chrome before 154.0.8037.57

Where it stands

  • Public proof of concept

How it unfolded

  1. 16 Oct, Microsoft Security Response Center (official): Chromium CVE-2026-106329: Incorrect authorization
  2. 16 Oct, Microsoft Security Response Center (official): Chromium CVE-2026-106417: Integer overflow
  3. 16 Oct, Microsoft Security Response Center (official): Chromium CVE-2026-110136: Use after free

Connects to

Why it is Amber

  • CVSS 9.6 critical
  • Public exploit or proof of concept referenced
  • Remotely exploitable without logging in

References

Original description

Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Last activity 29 Sep 2026. Patch Forecast updates every hour.