๐Ÿ” CVE Alert

CVE-2026-5281

HIGH 8.8 โš ๏ธ CISA KEV
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
11th

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CWE CWE-416
Vendor google
Product chrome
Ecosystems
Industries
Technology
Published Apr 1, 2026
Last Updated Apr 2, 2026
โš ๏ธ Actively Exploited โ€” Act Now

Get instant alerts for google chrome

This vulnerability is actively exploited in the wild. Set up free real-time alerts so you're first to know about threats like CVE-2026-5281.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

Affected Versions

Google / Chrome
146.0.7680.178 < 146.0.7680.178

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
chromereleases.googleblog.com: https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html issues.chromium.org: https://issues.chromium.org/issues/491518608 cisa.gov: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-5281