CVE-2026-19157

A flaw was found in ANGLE, a component within Google Chrome on Android. This out-of-bounds write vulnerability allows a remote attacker to potentially perform a sandbox escape by enticing a user to visit a specially crafted HTML page. This could lead to an attacker executing arbitrary code outside the browser's security sandbox.

This Important flaw in the ANGLE component of Chromium allows a remote attacker to achieve a sandbox escape. Exploitation requires user interaction, where a victim must visit a specially crafted HTML page, enabling an attacker to execute arbitrary code outside the browser's security sandbox. This bypasses security boundaries, leading to potential compromise of the underlying system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.