EUVD-2026-14683
GHSA-5v75-mv76-85fm
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessCraft malicious HTML page with WebAudio elements
-
ExploitUser visits page in Chrome
-
ExecutionOut-of-bounds memory read triggered
-
ImpactSensitive data exposed to attacker
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A06:2021 - Vulnerable and Outdated Components
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK
1 technique across 1 tactic: Collection The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The victim must open a crafted HTML page in Google Chrome versions prior to 146.0.7680.165. Remote unauthenticated attacker; victim interaction required (visiting malicious webpage). No special Chrome configuration needed. |
| Impact | Without a CVSS vector or EPSS score provided, risk assessment relies on several available signals: the Chromium security severity designation of High indicates significant real-world concern; the attack vector is remote and requires only a crafted HTML page (low complexity); no special privileges are required; and the impact is information disclosure rather than code execution. The vulnerability is not listed as part of the CISA KEV catalog based on available data, suggesting it may not be actively exploited in the wild at this time. The attack is automatable—a single malicious webpage can trigger the flaw for any visiting user. Given that this is a memory disclosure in a ubiquitous browser component with remote attack capability, it presents moderate-to-high real-world risk despite the absence of remote code execution. |
| Exploit ScenarioDerived | An attacker hosts a malicious website containing crafted HTML and JavaScript that triggers the WebAudio out-of-bounds read vulnerability. When a victim visits the site with a vulnerable version of Chrome, the attacker's code exploits the memory access flaw to read sensitive data from the browser's memory—such as previously loaded page content, session tokens, or other sensitive information—and exfiltrate it via a covert side channel or hidden HTTP request. The attack requires no user interaction beyond visiting the webpage and succeeds against unpatched Chrome installations. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 24, 2026
This vulnerability is an out-of-bounds memory read flaw in the WebAudio API implementation within Google Chrome prior to version 146.0.7680.165. A remote attacker can craft a malicious HTML page to trigger the vulnerability and read sensitive memory contents, leading to information disclosure. Although no CVSS score or EPSS data is provided, the Chromium security severity is rated as High, and the vulnerability affects all users of vulnerable Chrome versions until patching.
RemediationAI
Immediately upgrade Google Chrome to version 146.0.7680.165 or later. Most users can enable automatic updates to receive the patch automatically; manual updates are available via Chrome's Settings menu (About Chrome). Organizations managing Chrome deployments should push version 146.0.7680.165 or newer via their enterprise management tools. Until patching is complete, consider restricting access to untrusted websites and disabling JavaScript execution for high-risk content if operationally feasible. Additional details regarding the patch are available in the Chromium issue tracker at https://issues.chromium.org/issues/490533968.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in Google Chrome's WebAudio implementation, a high-level JavaScript API for processing and synthesizing audio in web applications. The root cause is classified under CWE-125 (Out-of-bounds Read), which indicates improper boundary checking when accessing memory buffers within the WebAudio processing pipeline. The affected product is identified via CPE as cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*, covering all Chrome versions before 146.0.7680.165. WebAudio operations such as buffer manipulation, audio graph processing, or parameter handling likely contain the flawed code that fails to validate array or buffer bounds before read operations.
Know when Chrome gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
Inappropriate implementation in WebAudio in Google Chrome prior to 146.0.7680.165 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)
Executive ViewAI
Organizations using WebAudio in Google Chrome face significant risk from CVE-2026-4677, a out-of-bounds read vulnerability rated CVSS 8.8. Successful exploitation could significantly impact the confidentiality, integrity, or availability of affected systems. A patch is available and should be applied as part of regular vulnerability management.
Apply vendor patch. If immediate patching is not feasible: (1) Implement network-level access controls to limit exposure; (2) Enable enhanced monitoring and alerting; (3) Apply principle of least privilege.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Related Vulnerabilities in Google Chrome Memory Safety Vulnerabilities
View all 7Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player
V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac
Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, a
The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, do
Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderb
Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi
An issue was discovered in the Cisco WebEx Extension before 1.0.7 on Google Chrome, the ActiveTouch General Plugin Conta
The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with
The Chrome Object Wrapper (COW) implementation in Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbi
The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and Se
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13
Same weakness CWE-125 – Out-of-bounds Read
View allSame technique Buffer Overflow
View allVendor StatusVendor
Debian
| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye (security), bullseye | vulnerable | 120.0.6099.224-1~deb11u1 | - |
| bookworm | vulnerable | 143.0.7499.169-1~deb12u1 | - |
| bookworm (security) | vulnerable | 146.0.7680.153-1~deb12u1 | - |
| trixie | vulnerable | 145.0.7632.159-1~deb13u1 | - |
| trixie (security) | vulnerable | 146.0.7680.153-1~deb13u1 | - |
| forky | vulnerable | 146.0.7680.153-1 | - |
| sid | fixed | 146.0.7680.164-1 | - |
| bullseye | fixed | (unfixed) | end-of-life |
| (unstable) | fixed | 146.0.7680.164-1 | - |
SUSE
Severity: High| Product | Status |
|---|---|
| SUSE Package Hub 15 SP6 | Fixed |
| openSUSE Leap 15.6 | Fixed |
| openSUSE Leap 16.0 | Fixed |
| openSUSE Tumbleweed | Fixed |
| SUSE Package Hub 15 SP6 | Fixed |
Exploit-DB