Google and NVD published CVE-2026-11672 in June 2026 as a high-severity Chrome-on-Android GPU heap buffer overflow fixed before version 149.0.7827.103, with NVD’s initial configuration tying vulnerable Chrome builds to Android rather than listing a separate Android Chrome product CPE. The...