EUVD-2026-17795
GHSA-xf76-839h-pfpm
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted HTML page to user
-
ExploitTrigger use-after-free in Dawn graphics module
-
ExecutionCompromise renderer process
-
ImpactExecute arbitrary code with renderer privileges
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Memory lifecycle management
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Victim must open a crafted HTML page in Google Chrome prior to version 146.0.7680.178. Requires attacker to have already compromised the renderer process, or victim clicks malicious link. Remote unauthenticated exploitation via social engineering. |
| Impact | While a CVSS score is not provided in available data, the Chromium security severity rating of 'High' combined with the RCE capability indicates substantial risk. The critical dependency on prior renderer process compromise significantly constrains the attack surface-this is not a direct unauthenticated remote attack vector. An attacker must first achieve renderer compromise through other means (malicious website, compromised JavaScript context, or browser extension). Once renderer access is obtained, the crafted HTML page trigger requires no additional user interaction or elevated privileges. The use-after-free condition is deterministic within a compromised renderer context, making exploitation relatively reliable. This should be prioritized for patching in enterprise environments where renderer compromise vectors are plausible (e.g., users visiting untrusted content), but it does not represent a primary attack vector on its own. |
| Exploit ScenarioDerived | An attacker who has successfully compromised Chrome's renderer process (for example, through a prior vulnerability in JavaScript execution, a malicious website, or a compromised browser extension) could craft a specially designed HTML page containing graphics operations that trigger the use-after-free condition in Dawn's memory management. When the renderer processes this page, the memory corruption vulnerability is exploited to execute arbitrary code with renderer process privileges. This code could then be used for further attacks such as stealing user data, installing malware, or pivoting to system-level compromise. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 01, 2026
Remote code execution in Google Chrome prior to version 146.0.7680.178 via a use-after-free vulnerability in the Dawn graphics component allows attackers who have already compromised the renderer process to execute arbitrary code through a crafted HTML page. The vulnerability requires prior renderer compromise but results in full code execution with high severity per Chromium's security classification.
RemediationAI
Vendor-released patch: Google Chrome 146.0.7680.178 or later. Users should immediately update to the latest available Chrome version through the browser's built-in update mechanism (Settings > About Google Chrome, or on macOS/Linux via the application menu). Automatic updates are enabled by default in most Chrome installations; however, administrators should verify deployment across managed environments. Detailed patch notes and the complete security advisory are available at https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html and https://issues.chromium.org/issues/491518608. No workaround is available for users unable to update immediately; the only effective mitigation is immediate patching.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in Dawn, Google's graphics abstraction layer used by Chrome for GPU rendering operations. Use-after-free vulnerabilities (CWE-416) occur when memory is accessed after it has been freed, typically causing memory corruption that can be leveraged for code execution. This specific instance affects the renderer process memory management within Dawn's graphics pipeline. The CPE designation cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* indicates all versions of Google Chrome prior to the patched release are affected.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
Lifecycle Timeline
5DescriptionCVE.org
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Articles & Coverage 2
Threat Intelligence Overview
NVD
CVE.org
CISA KEV
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Use-after-free vulnerabilities occur when a program continues to access memory through a pointer after that memory has been deallocated.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Related Vulnerabilities in Google Chrome 146.0.7680.178 Multiple Issues
View all 21Same weakness CWE-416 – Use After Free
View allVendor StatusVendor
Debian
| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye (security), bullseye | vulnerable | 120.0.6099.224-1~deb11u1 | - |
| bookworm | vulnerable | 143.0.7499.169-1~deb12u1 | - |
| bookworm (security) | vulnerable | 146.0.7680.164-1~deb12u1 | - |
| trixie | vulnerable | 145.0.7632.159-1~deb13u1 | - |
| trixie (security) | vulnerable | 146.0.7680.164-1~deb13u1 | - |
| forky | vulnerable | 146.0.7680.153-1 | - |
| sid | fixed | 146.0.7680.177-1 | - |
| bullseye | fixed | (unfixed) | end-of-life |
| (unstable) | fixed | 146.0.7680.177-1 | - |
Exploit-DB