Executive brief
Google Chrome on Android contains an input validation flaw that allows attackers to escape the browser's security sandbox. If an attacker first compromises the renderer process and then crafts a malicious HTML page, they can execute arbitrary code outside the sandbox, potentially gaining full access to the device. This is particularly dangerous because it turns a renderer compromise into a complete system compromise.
Technical details
This vulnerability is an improper input validation flaw in Chrome's input handling on Android, affecting versions prior to 152.0.7977.65. The vulnerability requires that the renderer process has already been compromised, after which a specially crafted HTML page can be used to break out of the sandbox and execute arbitrary code with system-level privileges. The attack vector is network-based, as the malicious HTML page is delivered via web. The Chromium project classified this as medium severity internally, though CVSS scoring suggests higher impact (8.3). A patch is available in Chrome 152.0.7977.65 and later.
Affected products
- Google Chrome prior to 152.0.7977.65 on Android
Timeline
- 2026-08-25: disclosed
- 2026-08-25: patched: Fixed in Chrome 152.0.7977.65