CVE-2026-5281
KEV High · CVSS 8.8- CVSS
- 8.8
- nvd
- EPSS
- —
- KEV
- Listed
- 2026-04-01
- Class
- kernel local
- CWE-416
Description
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
References
Status: profiled · ingested 2026-07-25T00:00:18.000Z