CVE-2026-10930: Out of bounds read in ANGLE in Google Chrome on Mac prior to 149

Synopsis

An out-of-bounds read vulnerability affects ANGLE, the graphics abstraction layer inside Google Chrome on macOS, in versions prior to 149.0.7827.53. The flaw is reachable over the network without any credentials, but requires a user to visit a crafted HTML page. A successful exploit reads memory outside the intended buffer, exposing sensitive in-process data and crashing the affected tab or renderer process. A patched-image rebuild at version 149.0.7827.53 is available on HarborGuard for environments running an affected version of Chrome.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers the exploit over the network by directing a victim to a crafted HTML page hosted on an attacker-controlled server.

• AuthenticationNot required

  No credentials or account of any kind are required; the exploit is available to any unauthenticated party who can serve a web page to the target.

• Victim interactionRequired

  The target user must visit or be redirected to the attacker's crafted HTML page, requiring a social-engineering or malicious-ad delivery step.

• Attack complexityDetail

  The exploit is reliable and imposes no race conditions or special environmental preconditions; a well-formed malicious page is sufficient to trigger the out-of-bounds read.

Blast Radius

• Reads memory contents from the Chrome renderer process, potentially exposing in-memory page data, cached credentials, or session tokens held by the browser.
• Crashes the affected renderer or tab process, causing a denial of service for the browsing session tied to the targeted page.