CVE-2026-22166 - Vulnerability Analysis
HighCVSS: 8.1Last Updated: May 1, 2026
WebGPU - Use After Free
Published: May 1, 2026Updated: May 1, 2026Remote Exploitable
Overview
A web page containing unusual WebGPU content triggers a write use-after-free in the GPU GLES user-space shared library, potentially enabling system-level exploits when executed with system privileges.
Severity & Score
Severity: High
CVSS Score: 8.1
Impact
An attacker can cause a crash and potentially escalate privileges to execute code at system level.
Mitigation
Update to the latest version with GPU GLES user-space shared library fixes.
Related Resources
Details
- CVE ID
- CVE-2026-22166
- Severity
- High
- CVSS Score
- 8.1
- Type
- use_after_free
- Status
- new
CWE
- CWE-416
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H