Sandbox Escape Vulnerability in Google Chrome for Android

CVE-2026-12438

What is CVE-2026-12438?

A vulnerability in the WebView component of Google Chrome for Android prior to version 149.0.7827.155 may allow a remote attacker to execute a sandbox escape through a specially crafted HTML page. This issue arises when the renderer process is compromised, potentially exposing users to various threats as the attacker can exploit this weakness to break the confines of the sandboxed environment.

References