GOOGLE has issued a Chrome 146 update that patches 21 vulnerabilities, including a zero‑day that has been exploited in the wild. According to Google, the exploited vulnerability is tracked as CVE-2026-5281 and is a use‑after‑free issue in Dawn, Chrome’s graphics layer. Google is aware that an exploit for CVE-2026-5281 exists in the wild, but has not disclosed details of the attacks.
The same advisory notes that CVE-2026-5284, another high‑severity use‑after‑free issue in Dawn reported by the same researcher, does not appear to have been exploited in the wild. All 21 vulnerabilities patched in the latest update were reported in March, and Google has not announced bug bounties for the researchers.