EUVD-2026-17802Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted HTML page to victim
-
ExploitTrigger use-after-free in Dawn graphics module
-
ExecutionCorrupt memory state in Chrome process
-
ImpactExecute arbitrary code with browser privileges
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Memory lifecycle management
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The victim must open a crafted HTML page in Google Chrome prior to version 146.0.7680.178. Affects Dawn component. Remote attacker requires no authentication but user interaction (opening malicious page) is required. |
| Impact | This vulnerability presents critical real-world risk despite missing CVSS/EPSS quantification. The attack vector is network-based and requires no authentication or user privileges (unauthenticated remote code execution), making it trivially exploitable at scale. Chromium's official 'High' severity classification reflects the combination of ease of exploitation, universal browser exposure, and memory corruption impact. The availability of a vendor patch significantly reduces risk for patched systems, but the broad CPE scope indicates all unpatched Chrome installations remain vulnerable. The use-after-free primitive in graphics code is particularly dangerous as it enables reliable code execution in a high-value attack surface. |
| Exploit ScenarioDerived | An attacker crafts a malicious HTML page containing WebGPU or graphics API calls that trigger the use-after-free condition in Dawn's memory management. When a user visits this page in unpatched Chrome, the vulnerability is triggered without additional interaction, allowing the attacker to read/write arbitrary memory and execute shellcode with Chrome's privileges. The attack can be delivered via compromised websites, malicious advertisements, or phishing emails, making it a high-impact vector for widespread compromise. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 01, 2026
Remote code execution in Google Chrome prior to version 146.0.7680.178 via use-after-free vulnerability in the Dawn graphics library allows unauthenticated remote attackers to execute arbitrary code through a crafted HTML page. The vulnerability affects all Chrome versions below the patched release and carries high severity per Chromium's assessment.
RemediationAI
Users must upgrade Google Chrome to version 146.0.7680.178 or later immediately. The patch is available through Chrome's automatic update mechanism; users can manually trigger updates via Menu → Help → About Google Chrome, which will display the update status and apply patches upon restart. No workarounds are available for this remote code execution vulnerability, making patching the only effective mitigation. Administrators managing Chrome deployments should verify patch deployment across their environment using Chrome's enterprise update mechanisms or endpoint management tools.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability exists in Dawn, Google Chrome's graphics abstraction layer used for WebGPU and other rendering operations. A use-after-free condition (CWE-416) occurs when memory is accessed after it has been freed, allowing attackers to corrupt heap state or execute arbitrary code. The flaw is triggered via specially crafted HTML content that manipulates the graphics pipeline, requiring no user interaction beyond visiting a malicious webpage. The affected product scope is broad across all Chrome versions using the vulnerable Dawn implementation (CPE: cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*).
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary rating from Vendor (Chrome).
CVSS VectorVendor: Chrome
Lifecycle Timeline
2DescriptionCVE.org
Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Use-after-free vulnerabilities occur when a program continues to access memory through a pointer after that memory has been deallocated.
Memory corruption occurs when a program writes data beyond the boundaries of allocated memory regions or accesses memory in unintended ways, violating the integrity of the process's address space.
Remote Code Execution represents the critical moment when an attacker successfully runs arbitrary code on a target system without physical access.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Related Vulnerabilities in Google Chrome 146.0.7680.178 Multiple Issues
View all 21Same weakness CWE-416 – Use After Free
View allVendor StatusVendor
Debian
| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye (security), bullseye | vulnerable | 120.0.6099.224-1~deb11u1 | - |
| bookworm | vulnerable | 143.0.7499.169-1~deb12u1 | - |
| bookworm (security) | vulnerable | 146.0.7680.164-1~deb12u1 | - |
| trixie | vulnerable | 145.0.7632.159-1~deb13u1 | - |
| trixie (security) | vulnerable | 146.0.7680.164-1~deb13u1 | - |
| forky | vulnerable | 146.0.7680.153-1 | - |
| sid | fixed | 146.0.7680.177-1 | - |
| bullseye | fixed | (unfixed) | end-of-life |
| (unstable) | fixed | 146.0.7680.177-1 | - |
GitHub PoC
Exploit-DB