CVE-2026-3536

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Integer overflow in ANGLE in Google Chrome prior to 145.0.7632.159 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Critical)

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-472 CWE-190

Affected software

No affected versions have been published.

Timeline

Published: Mar 4, 2026
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-353606.3The touch utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use (TOCTOU) race condition during file creation. When the CVE-2026-353614.4The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context CVE-2026-353623.6The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) symlink races using f CVE-2026-353635.6A vulnerability in the rm utility of uutils coreutils allows the bypass of safeguard mechanisms intended to protect the current directory. W CVE-2026-353646.3A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the mv utility of uutils coreutils during cross-device operations. The util CVE-2026-353656.6The mv utility in uutils coreutils improperly handles directory trees containing symbolic links during moves across filesystem boundaries. I CVE-2026-353664.4The printenv utility in uutils coreutils fails to display environment variables containing invalid UTF-8 byte sequences. While POSIX permits CVE-2026-353673.3The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This c CVE-2026-353687.8A vulnerability exists in the chroot utility of uutils coreutils when using the --userspec option. The utility resolves the user specificati CVE-2026-353695.5An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SI CVE-2026-35378.8Object lifecycle issue in PowerVR in Google Chrome on Android prior to 145.0.7632.159 allowed a remote attacker to potentially exploit heap CVE-2026-353704.4The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's real GID instead of the