CVE-2026-10909: Chrome Dawn Use-After-Free Sandbox Escape Vulnerability (CVSS 8.3)

Technical summary

CVE-2026-10909 is a use-after-free condition (CWE-416) in Dawn, Chrome's WebGPU implementation and graphics abstraction layer. The vulnerability exists in Chrome versions prior to 149.0.7827.53. An attacker must first compromise the renderer process (typically via JavaScript or WebGL exploit), then craft a malicious HTML page that triggers unsafe memory access in Dawn. This leads to a sandbox escape, allowing code execution at the OS privilege level rather than confined within Chrome's security boundary. The Chromium security team rated this as high severity due to the sandbox escape capability.

Business impact

A successful exploitation chain could allow attackers to gain full system compromise on any employee machine running a vulnerable Chrome version. This is particularly concerning in environments where users cannot be prevented from visiting untrusted websites. Unlike many renderer vulnerabilities contained within the sandbox, this one permits lateral movement to the host OS, making it suitable for targeted attacks against high-value individuals or organizations. Organizations should prioritize patching to prevent credential theft, data exfiltration, or malware installation at the OS level.

Affected systems

Google Chrome on Windows, macOS, and Linux distributions is directly affected. All versions prior to Chrome 149.0.7827.53 are vulnerable. While the vulnerability list includes references to Windows, macOS, and Linux kernel entries, the vulnerability is a Chrome-specific issue; patching Chrome itself is the primary mitigation. Users on all platforms should update immediately.

Exploitability

Exploitation requires two preconditions: (1) the attacker must first compromise Chrome's renderer process, typically via a separate graphics or JavaScript vulnerability, and (2) the user must visit a page crafted by the attacker. This is not a one-click remote code execution; it is part of a chain attack. However, the barrier to entry is not exceptionally high—renderer compromises via WebGL or JavaScript are relatively common, and users routinely visit untrusted content. The CVSS vector (AC:H) reflects the need for high attack complexity to trigger the use-after-free reliably, but once achieved, it grants full sandbox escape. This is not currently known to be exploited in the wild (KEV status is false).

Remediation

Immediate action: Update Google Chrome to version 149.0.7827.53 or later. Users should enable automatic updates to receive patches automatically. Organizations should verify deployment across all endpoints and consider blocking older Chrome versions via policy if feasible. This should be treated as a high-priority patch due to the sandbox escape nature.

Patch guidance

Google Chrome will automatically update to 149.0.7827.53 or later if automatic updates are enabled. Administrators can verify patching by checking chrome://version and confirming the version is 149.0.7827.53 or higher. For enterprise deployments, use the official Chrome Enterprise documentation to manage updates via group policy (Windows) or MDM (macOS/Linux). Verify vendor advisories against the Chromium security tracker to confirm that your version number matches the patched release.

Detection guidance

Monitor for Chrome crashes or renderer process restarts, which may indicate failed exploitation attempts. Endpoint detection and response (EDR) tools should monitor for unusual child processes spawned by Chrome or the Chromium process attempting OS-level system calls. Network monitoring may detect initial compromise attempts via malicious graphics content. Check for unexpected Chrome extensions or policy changes that might indicate post-compromise activity. Organizations should ensure Chrome crash reporting is enabled to capture telemetry.

Why prioritize this

This vulnerability merits urgent patching because it provides a sandbox escape path. While it requires a prior renderer compromise, the combination of two vulnerabilities (one in renderer, one in Dawn) is a realistic attack chain. The CVSS 8.3 rating reflects the high impact (integrity, confidentiality, availability) and the broad scope (escape from sandbox to host). Attacks targeting this vulnerability would likely be selective and sophisticated rather than indiscriminate worms, but the damage potential is extreme.

Risk score, explained

CVSS 3.1 score of 8.3 (HIGH) is calculated as: Network-accessible attack vector (AV:N), high attack complexity to reliably trigger the use-after-free condition (AC:H), no privileges required (PR:N), user interaction required to visit malicious page (UI:R), and scope change because it escapes the sandbox (S:C). The impact ratings (C:H, I:H, A:H) reflect that successful exploitation grants full OS-level code execution capability. The score appropriately reflects a serious but not critical vulnerability due to the attack complexity and prerequisite renderer compromise.

Frequently asked questions