CRITICAL: CVE-2026-6920 (CVSS 9.6) — google chrome

CVE: CVE-2026-6920

CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Severity: CRITICAL

Status: Critical advisory

Affected

• google chrome
• google android
• linux linux kernel
• microsoft windows

Summary

Out of bounds read in GPU in Google Chrome on Android prior to 147.0.7727.117 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Verified Sources

• NVD entry
• GitHub Advisory
• MITRE

References

• https://chromereleases.googleblog.com/2026/04/stable-channel-update-for-desktop_22.html
• https://issues.chromium.org/issues/499891888

---

_Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation._