Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
3524 articles · 168918 vulns · 37/41 feeds (7d)
← Back to list
8.3
CVE-2026-12028EXPLOITEDPATCHED
google · chrome

CVE-2026-12028: Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised

Description

Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome149.0.7827.115

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
googlechromecert_advisory90%
googleandroidcve_cpe95%

References

  • https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_01962725236.html
  • https://issues.chromium.org/issues/517555461

Related News (4 articles)

Tier B
CERT-FR1d ago
Multiples vulnérabilités dans Microsoft Edge (29 juin 2026)
→ No new info (linked only)
Tier B
BSI Advisories18d ago
[NEU] [hoch] Google Chrome: Mehrere Schwachstellen
→ No new info (linked only)
Tier C
VulDB18d ago
CVE-2026-12028 | Google Chrome up to 149.0.7827.103 on Android GPU use after free (ID 517555)
→ No new info (linked only)
Tier B
CERT-FR18d ago
Multiples vulnérabilités dans Google Chrome (12 juin 2026)
→ No new info (linked only)
CVSS 3.18.3 HIGH
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
149.0.7827.115
CWECWE-416
PublishedJun 11, 2026
Last enriched18d agov2
Trending Score54
Source articles4
Independent3
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-6307EXP
CVE-2026-6307: Type Confusion in Turbofan in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code
Trending: 62
HIGHCVE-2026-12448EXP
CVE-2026-12448: Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155 allowed a remote attacker to
Trending: 54
HIGHCVE-2026-12030EXP
CVE-2026-12030: Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had comprom
Trending: 54
HIGHCVE-2026-11647EXP
CVE-2026-11647: Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had comprom
Trending: 54
HIGHCVE-2026-13022EXP
CVE-2026-13022: Inappropriate implementation in Autofill in Google Chrome prior to 149.0.7827.197 allowed a remote attacker who had comp
Trending: 53

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Jun 11, 2026
Discovered by ZDM
Jun 11, 2026
Updated: severity, affectedVersions, activelyExploited
Jun 12, 2026
Actively Exploited
Jun 12, 2026
Patch Available
Jun 12, 2026

Version History

v2
Last enriched 18d ago
v2Tier C18d ago

Updated severity to CRITICAL, added affected version 149.0.7827.103, and marked as actively exploited.

severityaffectedVersionsactivelyExploited
via VulDB
v118d ago

Initial creation