Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2356 articles · 122387 vulns · 37/41 feeds (7d)
← Back to list
9.6
CVE-2026-6920EXPLOITEDPATCHED
google · chrome

CVE-2026-6920: Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromi

Description

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Affected Products

VendorProductVersions
googlechrome147.0.7727.117

References

  • https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_22.html
  • https://issues.chromium.org/issues/499891888

Related News (1 articles)

Tier C
VulDB4h ago
CVE-2026-6920 | Google Chrome up to 147.0.7727.101 on Android GPU out-of-bounds
→ No new info (linked only)
CVSS 3.19.6 CRITICAL
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
147.0.7727.117
CWECWE-125
PublishedApr 23, 2026
Last enriched2h agov2
Trending Score54
Source articles1
Independent1
Info Completeness9/14
Missing: epss, kev, exploit, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

CRITICALCVE-2026-6296EXP
CVE-2026-6296: Heap buffer overflow in ANGLE in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to potentially perform
Trending: 47
CRITICALCVE-2026-41179EXP
RClone: Unauthenticated operations/fsinfo allows attacker-controlled backend instantiation and local command execution
Trending: 46
HIGHCVE-2026-6297EXP
CVE-2026-6297: Use after free in Proxy in Google Chrome prior to 147.0.7727.101 allowed an attacker in a privileged network position to
Trending: 45
HIGHCVE-2026-6299EXP
CVE-2026-6299: Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code
Trending: 45
HIGHCVE-2026-5873EXP
CVE-2026-5873: Out of bounds read and write in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrar
Trending: 45

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 23, 2026
Discovered by ZDM
Apr 23, 2026
Updated: severity, affectedVersions, activelyExploited
Apr 23, 2026
Actively Exploited
Apr 23, 2026
Patch Available
Apr 23, 2026

Version History

v2
Last enriched 2h ago
v2Tier C2h ago

Updated severity to CRITICAL, added affected version 147.0.7727.101, and noted that no exploit is available.

severityaffectedVersionsactivelyExploited
via VulDB
v14h ago

Initial creation