CVE-2026-121247 chromium-browser: Buffer overflow in Dawn
CriticalCVSS 9.6
EPSS 0.45%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Dawn in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Chrome | >= 157.0.8103.38, < 157.0.8103.38 | 157.0.8103.38 |
| debian/chromium(Debian:12) | All versions | No fix listed |
| debian/chromium(Debian:12) | = 113.0.5672.126-1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.106-1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.106-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.106-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.133-1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.133-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.133-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.198-1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.198-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.198-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.90-1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.90-2 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.90-2~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 114.0.5735.90-2~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.102-1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.102-2 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.170-1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.170-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.170-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.98-1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.98-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.98-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 115.0.5790.98-2 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/chromium(Debian:12) | = 116.0.5845.110-1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.110-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.110-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.110-2 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.140-1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.140-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.140-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.180-1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.180-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.180-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.96-1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.96-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.96-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 116.0.5845.96-2 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.132-1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.132-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.132-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.132-2 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.149-1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.149-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.149-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.62-1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.62-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.62-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 117.0.5938.92-1 | No fix listed |
| debian/chromium(Debian:12) | = 118.0.5993.117-1 | No fix listed |
| debian/chromium(Debian:12) | = 118.0.5993.117-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 118.0.5993.117-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 118.0.5993.70-1 | No fix listed |
| debian/chromium(Debian:12) | = 118.0.5993.70-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 118.0.5993.70-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.105-1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.105-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.105-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.123-1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.123-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.123-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.159-1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.159-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.159-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.199-1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.199-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 119.0.6045.199-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.109-1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.109-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.109-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.129-1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.129-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.129-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.199-1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.199-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.199-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.216-1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.216-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.216-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.224-1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.224-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.224-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.224-2 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.71-1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.71-1~deb11u1 | No fix listed |
| debian/chromium(Debian:12) | = 120.0.6099.71-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 121.0.6167.139-1 | No fix listed |
| debian/chromium(Debian:12) | = 121.0.6167.139-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 121.0.6167.160-1 | No fix listed |
| debian/chromium(Debian:12) | = 121.0.6167.160-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 121.0.6167.85-1 | No fix listed |
| debian/chromium(Debian:12) | = 121.0.6167.85-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.111-1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.111-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.128-1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.128-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.57-1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.57-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.94-1 | No fix listed |
| debian/chromium(Debian:12) | = 122.0.6261.94-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.105-1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.105-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.105-1~deb13u1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.105-2 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.122-1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.122-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.58-1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.86-1 | No fix listed |
| debian/chromium(Debian:12) | = 123.0.6312.86-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.118-1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.118-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.155-1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.155-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.201-1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.201-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.207-1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.207-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.60-1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.60-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.60-2 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.78-1 | No fix listed |
| debian/chromium(Debian:12) | = 124.0.6367.78-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.112-1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.112-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.141-1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.141-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.60-1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.60-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.76-1 | No fix listed |
| debian/chromium(Debian:12) | = 125.0.6422.76-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.114-1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.114-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.126-1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.126-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.126-1~deb13u1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.182-1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.182-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.56-1 | No fix listed |
| debian/chromium(Debian:12) | = 126.0.6478.56-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 127.0.6533.119-1 | No fix listed |
| debian/chromium(Debian:12) | = 127.0.6533.119-1~deb13u1 | No fix listed |
| debian/chromium(Debian:12) | = 127.0.6533.88-1 | No fix listed |
| debian/chromium(Debian:12) | = 127.0.6533.88-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 127.0.6533.99-1 | No fix listed |
| debian/chromium(Debian:12) | = 127.0.6533.99-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.113-1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.113-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.113-1~deb13u1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.119-1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.119-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.137-1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.137-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.84-1 | No fix listed |
| debian/chromium(Debian:12) | = 128.0.6613.84-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.100-1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.100-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.100-2 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.58-1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.58-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.70-1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.70-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.89-1 | No fix listed |
| debian/chromium(Debian:12) | = 129.0.6668.89-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.116-1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.116-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.58-1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.58-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.69-1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.69-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.91-1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.91-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 130.0.6723.91-2 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.108-1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.108-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.139-1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.139-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.204-1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.204-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.264-1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.264-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.85-1 | No fix listed |
| debian/chromium(Debian:12) | = 131.0.6778.85-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 132.0.6834.110-1 | No fix listed |
| debian/chromium(Debian:12) | = 132.0.6834.110-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 132.0.6834.159-1 | No fix listed |
| debian/chromium(Debian:12) | = 132.0.6834.159-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 132.0.6834.83-1 | No fix listed |
| debian/chromium(Debian:12) | = 132.0.6834.83-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 133.0.6943.126-1 | No fix listed |
| debian/chromium(Debian:12) | = 133.0.6943.126-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 133.0.6943.141-2 | No fix listed |
| debian/chromium(Debian:12) | = 133.0.6943.53-1 | No fix listed |
| debian/chromium(Debian:12) | = 133.0.6943.53-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 133.0.6943.98-1 | No fix listed |
| debian/chromium(Debian:12) | = 133.0.6943.98-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 134.0.6998.117-1 | No fix listed |
| debian/chromium(Debian:12) | = 134.0.6998.117-1~deb12u1 | No fix listed |
| debian/chromium(Debian:12) | = 134.0.6998.35-1 | No fix listed |
| debian/chromium(Debian:12) | = 134.0.6998.35-1~deb12u1 | No fix listed |
References
- chromereleases.googleblog.com release-notes vendor-advisory
- issues.chromium.org permissions-required
- Red Hat CVE page mitigation vendor-advisory
- Red Hat Bugzilla 2566383 issue-tracking
- www.cve.org
- nvd.nist.gov
- Debian Security Tracker CVE-2026-121247 vendor-advisory