THE U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a Google Dawn flaw to its Known Exploited Vulnerabilities catalog. Tracked as CVE-2026-5281, the use-after-free defect in the Dawn component of Google Chrome prior to 146.0.7680.178 carries a CVSS score of 8.8.
According to CISA, the vulnerability could affect multiple Chromium-based products, including Google Chrome, Microsoft Edge, and Opera, with a remote attacker able to exploit it via a crafted HTML page after compromising the renderer process. This week Google released Chrome updates fixing 21 vulnerabilities, including the CVE-2026-5281 zero-day, and urged users to update to version 146.0.7680.177/178 (Windows/macOS) or 146.0.7680.177 (Linux). CISA also requires federal agencies to address the identified vulnerabilities by April 15, 2026.