CVE-2026-10927: Out of bounds read in Dawn in Google Chrome prior to 149

Synopsis

An out-of-bounds read vulnerability exists in Dawn, the WebGPU backend used by Google Chrome prior to version 149.0.7827.53. The flaw is reachable over the network and requires no authentication, but an attacker must first compromise the Chrome renderer process and persuade a victim to open a crafted HTML page. Successful exploitation enables a sandbox escape, granting the attacker capabilities beyond the browser sandbox including read access to sensitive data, the ability to tamper with files or system state, and potential full code execution. A patched-image rebuild at version 149.0.7827.53 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the crafted HTML page over the network, so the victim's browser must be reachable or the attacker must serve content across the internet or an internal network segment.

• AuthenticationNot required

  No account or credential is needed; the attack is initiated by persuading any unauthenticated user to visit a malicious page.

• Victim interactionRequired

  The victim must open a crafted HTML page in an affected Chrome version, making this a social-engineering-dependent attack requiring at least one user action.

• Attack complexityDetail

  Exploitation is rated high complexity because the attacker must already have compromised the Chrome renderer process before the out-of-bounds read can be leveraged for a sandbox escape, introducing a meaningful prerequisite condition.

Blast Radius

• A successful attacker escapes the Chrome sandbox, breaking the isolation boundary that normally confines renderer-process code.
• With sandbox escape achieved, the attacker reads files and data accessible to the browser process on the host, including stored credentials, cookies, and local user files.
• The attacker can modify files or system configuration within the scope of the compromised user account.
• Full disruption of the browser process and dependent services on the host is achievable through the same code-execution primitive.