What is the CVSS score of EUVD-2026-23070?

EUVD-2026-23070 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Google are affected by EUVD-2026-23070?

Google Chrome users face a critical sandbox escape vulnerability (CVE-2026-6314) in the GPU process that could allow an attacker who has already gained limited access to fully compromise the system.. A patch is available.

How to fix or mitigate EUVD-2026-23070?

Within 24 hours, initiate immediate deployment of Google Chrome version 147.0.7727.101 or later across all systems to patch the out-of-bounds write vulnerability in the GPU process. Enable automatic updates for Chrome and confirm that no devices are running earlier versions. Within 7 days, verify that patches are applied to all endpoints, including managed and unmanaged devices, and conduct a scan for any lingering outdated instances. Within 30 days, review and harden Chrome security settings, such as site isolation and sandboxing, and ensure that endpoint detection and response (EDR) tools are configured to monitor for unusual GPU process behavior as an additional safeguard.

Google EUVD-2026-23070

| CVE-2026-6314 HIGH

Out-of-bounds Write (CWE-787)

2026-04-15 Chrome

Buffer Overflow Google Memory Corruption

8.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.3 HIGH

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

SUSE

HIGH

qualitative

Red Hat

8.0 HIGH

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:12 vuln.today

CVSS changed

Apr 15, 2026 - 20:22 NVD

8.3 (HIGH)

Patch released

Apr 15, 2026 - 19:46 nvd

Patch available

EUVD ID Assigned

Apr 15, 2026 - 19:45 euvd

EUVD-2026-23070

CVE Published

Apr 15, 2026 - 19:04 nvd

HIGH 8.3

DescriptionCVE.org

Out of bounds write in GPU in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

AnalysisAI

Sandbox escape in Google Chrome's GPU process allows an attacker who has already compromised the GPU process to break out of the sandbox via a crafted HTML page, potentially achieving full system compromise. The vulnerability is an out-of-bounds write patched in version 147.0.7727.101. No active