What is GHSA-gf8f-g97g-h982?

GHSA-gf8f-g97g-h982 is a security advisory published by GitHub Security Advisories with High severity. Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed...

Which CVE IDs does GHSA-gf8f-g97g-h982 cover?

GHSA-gf8f-g97g-h982 covers the following CVE IDs: CVE-2026-9889. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-gf8f-g97g-h982?

GHSA-gf8f-g97g-h982 has a CVSS v3 base score of 8.3, published by GitHub Security Advisories.

GHSA-gf8f-g97g-h982HighCVSS 8.3

Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed...

Vendor

GitHub Security Advisories

Published

May 29, 2026

Last Modified

May 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-9889 →

📋 Description

Out of bounds read and write in Dawn in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-9889
https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_0877304591.html
https://issues.chromium.org/issues/511727159
https://github.com/advisories/GHSA-gf8f-g97g-h982