CVE-2026-22166 is a use-after-free vulnerability in GPU GLES user-space shared library triggered by unusual WebGPU content in web pages. The vulnerability can cause write UAF crashes in the GPU GLES render process. On platforms where graphics processes run with system privileges, this could enable privilege escalation and subsequent system exploitation. The vulnerability affects the WebGPU implementation and GPU driver components.